CVE-2026-23826
HIGHHPE Aruba AOS-8 Network Management Service - Unauthenticated Denial of Service
Title source: manualDescription
A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by sending specially crafted network packets to the affected device, potentially resulting in a denial-of-service condition. Successful exploitation could cause the affected service process to terminate unexpectedly, disrupting normal device operations.
References (1)
Core 1
Scores
CVSS v3
7.5
EPSS
0.0011
EPSS Percentile
28.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-770
Status
published
Products (5)
arubanetworks/arubaos
6.5.4.0 - 8.10.0.22
arubanetworks/sd-wan
8.6.0.4-2.2.0.0 - 8.6.0.4-2.2.0.7
Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Wireless Operating System (AOS)
8.10.0.0 - 8.10.0.21
Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Wireless Operating System (AOS)
8.12.0.0 - 8.12.0.6
Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Wireless Operating System (AOS)
8.13.0.0 - 8.13.1.1
Published
May 12, 2026
Tracked Since
May 13, 2026