CVE 7.5 HIGH

Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component_CVE-2026-23824

7.5 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.

Basic Information

ID CVE-2026-23824
Source hpe
Published May 12, 2026 at 18:51

Affected Product

Vendor Hewlett Packard Enterprise (HPE)
Product HPE Aruba Networking Wireless Operating System (AOS)
Version 10.8.0.0
Affected Versions Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) 10.8.0.0
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) 10.7.0.0
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) 10.4.0.0

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.