CVE-2026-79811 — Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API

CVE-2026-79811

Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API PUBLISHED

Description (CNA)

A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks against the ClearPass Policy Manager instance. Successful exploitation could allow an attacker to execute arbitrary database commands.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / ClearPass Policy Manager (CPPM)	affected 6.14.0 through 6.14.0; affected 6.11.0 through 6.11.15

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05158en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.