CVE-2026-79798

CriticalCVSS 9.9/10Last modified Oct 8, 2026

Description

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Hewlett Packard Enterprise (HPE)ClearPass Policy Manager (CPPM)>= 6.14.0, <= 6.14.0; >= 6.11.0, <= 6.11.15

References

Timeline

Published
Oct 6, 2026
Last modified
Oct 8, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-797998.8A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct CVE-2026-79808.8Use after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via CVE-2026-798008.8An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation coulCVE-2026-798019.8A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthCVE-2026-798028.8A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attackerCVE-2026-798038.8A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remoteCVE-2026-798047.3A vulnerability was found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. Affected by this issue isCVE-2026-798059.8An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read anCVE-2026-798067.8A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to CVE-2026-798077.8A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a CVE-2026-798087.8A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticateCVE-2026-798097.3An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulne