ClearPass Policy Manager Hit by 28 CVEs Including Unauthenticated RCE and Authentication Bypass — Enterprise NAC’s Trust-Through-Defaults Problem

HPE security advisory HPESBNW05158 rev.1, published October 6, 2026, discloses 28 vulnerabilities within the ClearPass Policy Manager (CPPM). The cluster includes 10 critical, 11 high, and 7 medium-severity CVEs. Among the critical…