Critical severity9.1NVD Advisory· Published Oct 6, 2026

CVE-2026-79794

Description

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

Affected products

ClearPass/ClearPass Policy Managerllm-fuzzy
HPE/ClearPass Policy Managerllm-fuzzy

Patches

Vulnerability mechanics

References

support.hpe.com/hpesc/public/docDisplaynvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000