CVE-2026-79798 — Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface
SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injecti…
Published: 2026-10-06 · CVSS: 9.9 · CVSS 3.1
SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7