[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4MwwrTUCSZ5t6A2AHrntu-k61yQwSoAQ-QuVh3S6c8k":3,"g5a-risk:CVE-2021-26928":109},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":27,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":51,"references":52,"referencesCount":51,"weaknesses":60,"weaknessesCount":51,"isActivelyExploited":69,"cisaInfo":27,"otxData":27,"relatedBlogPosts":70,"seoMetadata":71,"configurations":96,"relatedVendorCves":105,"notableEvents":106},"CVE-2021-26928","What is CVE-2021-26928?","BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD (which may, for example, include Tigera products in some configurations, as well as products of other vendors) may have been susceptible to route redirection for Denial of Service and\u002For Information Disclosure. NOTE: a researcher has asserted that the behavior is within Tigera’s area of responsibility; however, Tigera disagrees","BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD (which may, for example, ...","2021-06-04T21:15:07.433","2024-08-03T21:15:31.063",6.8,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":34,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":24,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":22,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","LOW","NONE","UNCHANGED","MEDIUM",null,1.6,5.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":24,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":22,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":26,"ExploitabilityScore":12,"ImpactScore":41,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":26,"Authentication":39,"ConfidentialityImpact":40,"IntegrityImpact":24,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:N\u002FA:P","SINGLE","PARTIAL",4.9,0.01008,[42,42,42,42,42,42,42],"Medium",[46],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"nic","bird","*","cpe:2.3:a:nic:bird:*:*:*:*:*:*:*:*",1,[53],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fwww.cyberark.com\u002Fresources\u002Fthreat-research-blog\u002Fattacking-kubernetes-clusters-through-your-network-plumbing-part-2","Cyberark",[57,58,59],"Exploit","Mitigation","Third Party Advisory",[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",false,[],{"title":72,"metaDescription":73,"keywords":74,"canonicalUrl":75,"structuredData":76},"What is CVE-2021-26928? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-26928, a medium severity cyber security vulnerability from 2021. BIRD through 2.0.7 does not provide functionality for pas...","CVE-2021-26928, CVE-2021-26928 vulnerability, CVE-2021-26928 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, nic security, bird vulnerability","\u002Fwhat-is\u002Fcve-2021-26928",{"@context":77,"@type":78,"headline":72,"description":73,"datePublished":10,"dateModified":11,"author":79,"publisher":83,"about":87,"mainEntityOfPage":91,"articleSection":94,"keywords":95},"https:\u002F\u002Fschema.org","TechArticle",{"@type":80,"name":81,"url":82},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":80,"name":81,"url":82,"logo":84},{"@type":85,"url":86},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":88,"name":6,"description":89,"additionalType":90},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":92,"@id":93},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-26928","Cybersecurity","CVE-2021-26928, CVE-2021-26928 vulnerability, CVE-2021-26928 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[97],{"Operator":27,"Negate":27,"Nodes":98},[99],{"Operator":100,"Negate":27,"CPEMatch":101},"OR",[102],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":103,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":104},"ED0621BB-38B1-44AF-BFBD-59B85E1B1936","2.0.7",[],[],{"lastModified":11,"cacheTime":108,"version":37},1792347718685,{"score":110,"band":44,"action":111,"scoredAt":112},43,"Plan remediation","2026-10-16T06:51:17.417741+00:00"]