CVE-2026-79811

HighCVSS 7.2/10Last modified Oct 8, 2026

Description

A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to execute arbitrary database commands.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Oct 6, 2026
Last modified: Oct 8, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-798126.1A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allo CVE-2026-798136.7A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged loc CVE-2026-798146.7An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to eleva CVE-2026-798156.5A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject ar CVE-2026-798166.3A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a CVE-2026-798175.5A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploi CVE-2026-798185.3A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authen CVE-2026-79826.5Uninitialized Use in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information CVE-2026-798209.0A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.CVE-2026-798218.2A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.CVE-2026-798227.1A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.CVE-2026-798234.0HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.