CVE-2026-23599 Local Privilege Escalation Vulnerability in HPE Aruba Networking Clear Pass Policy Manager OnGuard for Linux

🗓️ 17 Feb 2026 23:04:36Reported by hpeType

Local privilege escalation in HPE Aruba ClearPass OnGuard for Linux enables root code execution.

Reporter	Title	Published	Views	Family All 12
attackerkb	CVE-2026-23599	17 Feb 202623:04	–	attackerkb
Tenable Nessus	Aruba ClearPass Policy Manager 6.11.x < 6.11.13 / 6.12.x < 6.12.7 Local Privilege Escalation (CVE-2026-23599)	20 Feb 202600:00	–	nessus
BDU FSTEC	The vulnerability of the OnGuard component of the software platform for managing network access policies in HPE Aruba Networking ClearPass Policy Manager allows a malicious actor to increase their privileges.	19 Mar 202600:00	–	bdu_fstec
Circl	CVE-2026-23599	18 Feb 202600:16	–	circl
CNNVD	HPE Aruba Networking ClearPass OnGuard Software 安全漏洞	18 Feb 202600:00	–	cnnvd
CVE	CVE-2026-23599	17 Feb 202623:04	–	cve
HPE Security Bulletins	HPESBNW05012 rev.1 - Local Privilege Escalation Vulnerability in HPE Aruba Networking ClearPass Policy Manager (CPPM) OnGuard Software for Linux	17 Feb 202600:00	–	hpe
NVD	CVE-2026-23599	18 Feb 202600:16	–	nvd
Positive Technologies	PT-2026-20310	17 Feb 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-23599: Improper Privilege Management	18 Feb 202600:00	–	rapid7

[
  {
    "defaultStatus": "affected",
    "product": "HPE Aruba Networking ClearPass Policy Manager",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "lessThanOrEqual": "6.12.7",
        "status": "affected",
        "version": "6.12.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "6.11.13",
        "status": "affected",
        "version": "6.11.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpesc/public/docDisplay

17 Feb 2026 23:04Current

CVSS 3.17.8

EPSS0.00149

SSVC