CVE-2026-76754

CriticalCVSS 9.8/10Last modified Oct 8, 2026

Description

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Oct 6, 2026
Last modified: Oct 8, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-767555.9Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.CVE-2026-767565.9Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.CVE-2026-767575.9Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions: *.*.CVE-2026-767585.9Vulnerability in Drupal Link content parser. This issue affects Link content parser versions: *.*.CVE-2026-767597.3Vulnerability in Drupal Screenshot. This issue affects Screenshot versions: *.*.CVE-2026-76764.3A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springb CVE-2026-767607.3A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/we CVE-2026-767617.3A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of t CVE-2026-767627.3A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.ph CVE-2026-767637.5A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string CVE-2026-767647.3A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/apro CVE-2026-767698.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privil