CVE-2026-79803

Summary

A command injection vulnerability allows an authenticated attacker to execute arbitrary commands, potentially gaining full administrative control over the ClearPass Policy Manager system.

Exploitability

Exploitation requires an authenticated session and knowledge of the API endpoint, making it moderately difficult.

Blast radius

If exploited, the attacker could gain full administrative control, leading to complete system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected API feature or restrict access to the specific API endpoint.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.