CVE-2026-76754: Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager
A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated remote attacker could exploit the affected ClearPass Policy Manager interface. No privileges or user interaction are required according to the supplied severity vector.
What level of access could successful exploitation provide?
Successful exploitation could let an attacker run arbitrary database commands against the ClearPass Policy Manager instance. The supplied severity vector rates confidentiality, integrity, and availability impact as high.
Is a default deployment affected?
The available information identifies an affected interface but does not state whether that interface is enabled or exposed by default.
How can I determine whether my deployment is affected?
Confirm whether your Aruba ClearPass Policy Manager instance has the affected interface described in the vendor advisory. The provided data does not include affected version ranges or detection indicators.