CVE-2021-26968

A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface.

• CWE-79

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txtVendor Advisory
• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txtVendor Advisory

Published

Mar 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26962A remote authenticated arbitrary command execution vulnerabi…7.2
• CVE-2021-26963A remote authenticated arbitrary command execution vulnerabi…7.2
• CVE-2021-26964A remote authentication restriction bypass vulnerability was…7.1
• CVE-2021-26965A remote authenticated sql injection vulnerability was disco…6.5
• CVE-2021-26966A remote authenticated sql injection vulnerability was disco…6.5
• CVE-2021-26967A remote reflected cross-site scripting (xss) vulnerability …6.1
• CVE-2021-26969A remote authenticated authenticated xml external entity (xx…6.5
• CVE-2021-26970A remote authenticated arbitrary command execution vulnerabi…6.3
• CVE-2021-26971A remote authenticated arbitrary command execution vulnerabi…6.3
• CVE-2021-26987Element Plug-in for vCenter Server incorporates SpringBoot F…9.8
• CVE-2021-26988Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P1…3.5
• CVE-2021-26989Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P1…6.5