CVE-2026-79809 — Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated re…

Published: 2026-10-06 · CVSS: 7.3 · CVSS 3.1

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7