CVE-2026-79794

Summary

A SQL injection vulnerability in ClearPass Policy Manager allows authenticated attackers to execute arbitrary database commands, posing a critical risk to the integrity and confidentiality of the database.

Exploitability

Exploitation requires an authenticated attacker with access to the web-based management interface, making it moderately hard to exploit.

Blast radius

If exploited, this vulnerability could result in complete database compromise, leading to data theft or corruption.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the latest version of ClearPass Policy Manager, as detailed in the vendor advisory.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.