CVE-2026-79803
A command injection vulnerability exists in the API of ClearPass Policy Manager
- Risk score
- 64/100
- CVSS
- 8.8 v3.1
- Exploit chance (30 days)
- 0.8%
- Published
- 6 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.8 high
References
Original description
A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system.
Last activity 6 Oct 2026. Patch Forecast updates every hour.