CRITICAL 9.8 NVD

CVE-2026-76754

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

Published: 2026-10-06 · Source: NVD · Feed updated: 2026-10-06

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-10-06 via NVD.

Risk Timeline

CVE Disclosed2026-10-06 · -1 days ago

Remediation Resources

Analysis & PoC

support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLoc

vulnfeed aggregates 9512 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.