CVE-2026-79798: Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface

Published Oct 6, 2026

Updated

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

Affected Software

1 affected component

Aruba ClearPass Policy Manager

Event History

Oct 6, 2026

CVE Published

via MITRE·07:17 PM

Data Sourced

via MITRE·07:17 PM

DescriptionSeverity

Data Sourced

via NVD·08:17 PM

DescriptionSeverity

Frequently Asked Questions

Who is exposed to exploitation?

ClearPass Policy Manager instances with the web-based management interface accessible to a remote attacker are exposed if that attacker has a low-privileged authenticated account. No user interaction is required.

What level of access does an attacker need?

An attacker must authenticate to the ClearPass Policy Manager web-based management interface with low privileges. The issue is remotely exploitable with low attack complexity.

What could successful exploitation allow?

Successful exploitation could allow the authenticated attacker to execute arbitrary database commands against the ClearPass Policy Manager instance. The reported impact includes high confidentiality, integrity, and availability impact, with scope changed.

CVE-2026-79798: Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface

Affected Software

Event History

Frequently Asked Questions

Who is exposed to exploitation?

What level of access does an attacker need?

What could successful exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to exploitation?

What level of access does an attacker need?

What could successful exploitation allow?