CVE-2021-26683

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.

• CWE-78

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txtVendor Advisory
• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txtVendor Advisory

Published

Feb 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26677A local authenticated escalation of privilege vulnerability …7.8
• CVE-2021-26678A remote unauthenticated stored cross-site scripting (XSS) v…6.1
• CVE-2021-26679A remote authenticated command injection vulnerability was d…7.2
• CVE-2021-26680A remote authenticated command injection vulnerability was d…7.2
• CVE-2021-26681A remote authenticated command Injection vulnerability was d…7.2
• CVE-2021-26682A remote reflected cross-site scripting (XSS) vulnerability …6.1
• CVE-2021-26684A remote authenticated command injection vulnerability was d…7.2
• CVE-2021-26685A remote authenticated SQL Injection vulnerabilitiy was disc…6.5
• CVE-2021-26686A remote authenticated SQL Injection vulnerabilitiy was disc…6.5
• CVE-2021-26687An issue was discovered on LG mobile devices with Android OS…9.8
• CVE-2021-26688An issue was discovered on LG Wing mobile devices with Andro…9.8
• CVE-2021-26689An issue was discovered on LG mobile devices with Android OS…9.8