CVE-2021-26682

A remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the portal. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the guest portal interface.

• CWE-79

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txtVendor Advisory
• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txtVendor Advisory

Published

Feb 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26676gdhcp in ConnMan before 1.39 could be used by network-adjace…6.5
• CVE-2021-26677A local authenticated escalation of privilege vulnerability …7.8
• CVE-2021-26678A remote unauthenticated stored cross-site scripting (XSS) v…6.1
• CVE-2021-26679A remote authenticated command injection vulnerability was d…7.2
• CVE-2021-26680A remote authenticated command injection vulnerability was d…7.2
• CVE-2021-26681A remote authenticated command Injection vulnerability was d…7.2
• CVE-2021-26683A remote authenticated command injection vulnerability was d…7.2
• CVE-2021-26684A remote authenticated command injection vulnerability was d…7.2
• CVE-2021-26685A remote authenticated SQL Injection vulnerabilitiy was disc…6.5
• CVE-2021-26686A remote authenticated SQL Injection vulnerabilitiy was disc…6.5
• CVE-2021-26687An issue was discovered on LG mobile devices with Android OS…9.8
• CVE-2021-26688An issue was discovered on LG Wing mobile devices with Andro…9.8