CVE-2026-23824
HIGHUnauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component
Title source: cnaDescription
Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.
References (1)
Core 1
Scores
CVSS v3
7.5
EPSS
0.0004
EPSS Percentile
13.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-400
Status
published
Products (5)
arubanetworks/arubaos
6.5.4.0 - 8.10.0.22
arubanetworks/sd-wan
8.6.0.4-2.2.0.0 - 8.6.0.4-2.2.0.7
Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Wireless Operating System (AOS)
10.4.0.0 - 10.4.1.10
Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Wireless Operating System (AOS)
10.7.0.0 - 10.7.2.2
Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Wireless Operating System (AOS)
10.8.0.0
Published
May 12, 2026
Tracked Since
May 13, 2026