CRITICAL 9.1 NVD

CVE-2026-79794

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL inje

A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

Published: 2026-10-06 · Source: NVD · Feed updated: 2026-10-06

This critical severity vulnerability with a CVSS score of 9.1 was published on 2026-10-06 via NVD.

Risk Timeline

CVE Disclosed2026-10-06 · -1 days ago

Remediation Resources

Analysis & PoC

support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLoc

vulnfeed aggregates 9512 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.