Critical severity9.8NVD Advisory· Published Oct 6, 2026

CVE-2026-76754

Description

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

Affected products

ClearPass Policy Manager/ClearPass Policy Managerllm-fuzzy
HPE/ClearPass Policy Managerllm-fuzzy

Patches

Vulnerability mechanics

References

support.hpe.com/hpesc/public/docDisplaynvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000