CVE-2026-79799

Summary

This vulnerability allows an attacker to inject malicious scripts into the ClearPass Policy Manager web interface, potentially leading to arbitrary code execution in the victim's browser.

Exploitability

Exploitation requires access to the ClearPass Policy Manager web interface, and the attacker must be able to inject malicious content, which is moderately difficult.

Blast radius

If exploited, the vulnerability could impact any administrative user who visits a maliciously crafted page within the affected interface, potentially leading to data theft or further compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the latest version of ClearPass Policy Manager as soon as possible.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.