Is CVE-2026-76754 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-76754?

CVE-2026-76754 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-76754

Description

A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.