What is GHSA-x6vr-x995-pjqg?

GHSA-x6vr-x995-pjqg is a security advisory published by GitHub Security Advisories with High severity. An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy...

Which CVE IDs does GHSA-x6vr-x995-pjqg cover?

GHSA-x6vr-x995-pjqg covers the following CVE IDs: CVE-2026-79809. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x6vr-x995-pjqg?

GHSA-x6vr-x995-pjqg has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

GHSA-x6vr-x995-pjqgHighCVSS 7.3

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy...

Vendor

GitHub Security Advisories

Published

October 6, 2026

Last Modified

October 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-79809 →

📋 Description

An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remote attacker to influence authorization decisions and be assigned an unintended role.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-79809
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US
https://github.com/advisories/GHSA-x6vr-x995-pjqg