CVE-2026-79811 — Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API
A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks …
Published: 2026-10-06 · CVSS: 7.2 · CVSS 3.1
A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to execute arbitrary database commands.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7