CVE-2026-76754
9.8 CRITICALPublished 2026-10-06 · Updated 2026-10-08
AI risk analysis
- Summary
- This vulnerability allows unauthenticated attackers to conduct SQL injection attacks, potentially leading to arbitrary database command execution.
- Exploitability
- Exploitation is relatively straightforward given the unauthenticated nature and the ability to run arbitrary database commands.
- Blast radius
- If exploited, the attacker could gain full control over the database, leading to data theft, corruption, or manipulation.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to ClearPass Policy Manager version 9.10.1 or later.
rcesql-injectiondatabaseunauthenticated
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2015-20122
- CRITICALCVE-2023-54400PoC
- HIGHCVE-2026-100644PoC
- HIGHCVE-2026-100683PoC
- HIGHCVE-2026-103253PoC
- HIGHCVE-2026-25434
- CRITICALCVE-2026-39764
- CRITICALCVE-2026-39785
Related by shared AI tags and CWE weakness class. Browse the full archive.