CVE-2026-79802
A command injection vulnerability exists in the client software of ClearPass Policy Manager
- Risk score
- 71/100
- CVSS
- 8.8 v3.1
- Exploit chance (30 days)
- 1.2%
- Published
- 6 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.8 high
- Remotely exploitable without logging in
References
Original description
A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host.
Last activity 6 Oct 2026. Patch Forecast updates every hour.