CVE-2026-23599
Published: 18 February 2026
Summary
CVE-2026-23599 is a high-severity Improper Privilege Management (CWE-269) vulnerability in Hpe (inferred from references). Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 0.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-6 (Least Privilege) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2026-23599 is a local privilege-escalation vulnerability in the HPE Aruba Networking ClearPass OnGuard Software for Linux. It enables a local attacker to achieve arbitrary code execution with root privileges, as identified under CWE-269 (Improper Privilege Management). The vulnerability received a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high impact with low attack complexity and requiring only local access and low privileges.
A local attacker with low-level privileges on the affected system can exploit this vulnerability without user interaction. Successful exploitation grants root-level arbitrary code execution, potentially allowing full system compromise, data theft, persistence, or further lateral movement within the environment.
The HPE advisory at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05012en_us&docLocale=en_US provides details on mitigation and patching instructions for this vulnerability.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-8064
Vulnerability details
A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking ClearPass OnGuard Software for Linux. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Local privilege escalation via improper privilege management directly enabling root-level arbitrary code execution.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates the privilege-escalation vulnerability by requiring timely remediation through patching of the ClearPass OnGuard software flaw as specified in the HPE advisory.
Addresses CWE-269 improper privilege management by enforcing least privilege for local accounts and processes, limiting the impact and success of escalation to root.
Enforces access control policies that can prevent unauthorized privilege escalation by local low-privilege attackers attempting arbitrary code execution.