CVE-2021-26970

A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system leading to partial system compromise.

• CWE-78

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txtVendor Advisory
• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txtVendor Advisory

Published

Mar 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26964A remote authentication restriction bypass vulnerability was…7.1
• CVE-2021-26965A remote authenticated sql injection vulnerability was disco…6.5
• CVE-2021-26966A remote authenticated sql injection vulnerability was disco…6.5
• CVE-2021-26967A remote reflected cross-site scripting (xss) vulnerability …6.1
• CVE-2021-26968A remote authenticated stored cross-site scripting (xss) vul…4.8
• CVE-2021-26969A remote authenticated authenticated xml external entity (xx…6.5
• CVE-2021-26971A remote authenticated arbitrary command execution vulnerabi…6.3
• CVE-2021-26987Element Plug-in for vCenter Server incorporates SpringBoot F…9.8
• CVE-2021-26988Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P1…3.5
• CVE-2021-26989Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P1…6.5
• CVE-2021-26990Cloud Manager versions prior to 3.9.4 are susceptible to a v…9.1
• CVE-2021-26991Cloud Manager versions prior to 3.9.4 contain an insecure Cr…7.5