CVE-2021-26928

BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD (which may, for example, include Tigera products in some configurations, as well as products of other vendors) may have been susceptible to route redirection for Denial of Service and/or Information Disclosure. NOTE: a researcher has asserted that the behavior is within Tigera’s area of responsibility; however, Tigera disagrees

• CWE-306
• CWE-306

• https://www.cyberark.com/resources/threat-research-blog/attacking-kubernetes-clusters-through-your-network-plumbing-part-2Exploit, Mitigation, Third Party Advisory
• https://www.cyberark.com/resources/threat-research-blog/attacking-kubernetes-clusters-through-your-network-plumbing-part-2Exploit, Mitigation, Third Party Advisory

Published

Jun 4, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26921In util/session/sessionmanager.go in Argo CD before 1.8.4, t…6.5
• CVE-2021-26923An issue was discovered in Argo CD before 1.8.4. Accessing t…7.5
• CVE-2021-26924An issue was discovered in Argo CD before 1.8.4. Browser XSS…6.1
• CVE-2021-26925Roundcube before 1.4.11 allows XSS via crafted Cascading Sty…5.4
• CVE-2021-26926A flaw was found in jasper before 2.0.25. An out of bounds r…7.1
• CVE-2021-26927A flaw was found in jasper before 2.0.25. A null pointer der…5.5
• CVE-2021-26929An XSS issue was discovered in Horde Groupware Webmail Editi…6.1
• CVE-2021-26930An issue was discovered in the Linux kernel 3.11 through 5.1…7.8
• CVE-2021-26931An issue was discovered in the Linux kernel 2.6.39 through 5…5.5
• CVE-2021-26932An issue was discovered in the Linux kernel 3.2 through 5.10…5.5
• CVE-2021-26933An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a…5.5
• CVE-2021-26934An issue was discovered in the Linux kernel 4.18 through 5.1…7.8