Is CVE-2026-79798 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-79798?

CVE-2026-79798 has a CVSS v3 severity of CRITICAL (9.9).

Back

CVE-2026-79798

Description

SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to run arbitrary database commands.