CVE-2026-102161

An unauthenticated attacker positioned on an adjacent private network —or an attacker routed through a reverse proxy/load balancer that forwards client headers—can forge their source IP address . This vulnerability allows the attacker to gain administrative session privileges on the CV-CUE backen...

EUVD-2026-93956

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...

CVE-2026-102159 Security Advisory 0190

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...

CVE-2026-101152 Security Advisory 0187

Insufficient validation in the Single Sign-On SSO login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider IdP to deliver authentication material to an attacker-controlled URL instead of to CloudVision...

EUVD-2026-93947

Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbitrary external site upon completion of the authentication process...

CVE-2026-101151 Security Advisory 0187

Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbitrary external site upon completion of the authentication process...

CVE-2026-101151

Insufficient validation of requests within the login flow allows a remote, unauthenticated attacker to craft a malicious URL. When a user clicks this link, they may be redirected to an arbitrary external site upon completing the authentication process. This vulnerability is associated with CWE-60...

EUVD-2026-93948

Insufficient validation in the Single Sign-On SSO login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider IdP to deliver authentication material to an attacker-controlled URL instead of to CloudVision...

CVE-2026-101151 Security Advisory 0187

Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbitrary external site upon completion of the authentication process...

CVE-2026-101152

A vulnerability exists in the Single Sign-On (SSO) login flow of CloudVision due to insufficient validation. A remote, unauthenticated attacker could craft a malicious URL that, when accessed by a user, tricks the identity provider (IdP) into delivering sensitive authentication material to an att...

CVE-2026-82162

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-79818 Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager

A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to obtain sensitive information from the affected system...

CVE-2026-79818 Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager

A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to obtain sensitive information from the affected system...

CVE-2026-79816

A DOM-based cross-site scripting (XSS) vulnerability exists in the client interface of HPE Networking ClearPass Policy Manager . This flaw allows an unauthenticated remote attacker to execute arbitrary script code within a victim's browser context while using the affected client interface. No spe...

EUVD-2026-93895

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role...

CVE-2026-79809 Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role...

CVE-2026-79809 Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role...

CVE-2026-79801

A missing integrity verification vulnerability exists in the client agent software of HPE Networking ClearPass Policy Manager . This flaw could allow an unauthenticated remote attacker to introduce untrusted code into the system. Successful exploitation could result in the execution of arbitrary ...

CVE-2026-79799

A vulnerability in the ClearPass Policy Manager web-based management interface allows an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack. This flaw targets administrative users of the interface, potentially enabling the execution of arbitrary script code with...

CVE-2026-79799 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in ClearPass Policy Manager Web-Based Management Interface

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary...