Vulnerability in Standardized Wireless Roaming Protocol Affecting HPE Products
CVE-2026-23808

5.4MEDIUM

Key Information:

Vendor: HP (HP)
Status: HP Aruba Networking Wireless Operating System (aos-10 & Aos-8)
Vendor: CVE Published:; 4 March 2026

What is CVE-2026-23808?

A vulnerability has been detected within a widely used wireless roaming protocol that may allow a malicious actor to implant a counterfeit Group Temporal Key (GTK) on a client device. If successfully exploited, this vulnerability could enable the remote adversary to inject unauthorized data frames, circumvent client isolation measures, interfere with traffic between clients, and jeopardize the overall integrity and confidentiality of network segmentation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) 10.8.0.0

HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) 10.7.0.0 <= 10.7.2.2

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Mar 4, 2026
Vulnerability Reserved
Jan 16, 2026

Credit

Xin'an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian, Zhaowei Tan,Srikanth V. Krishnamurthy from University of California, and Mathy Vanhoef from DistriNet, KU Leuven

JSON

HP (HP)