Protocol-Handling Vulnerabilities in AOS-8 and AOS-10 Operating Systems
CVE-2026-23824

7.5HIGH

Key Information:

Vendor

HP (HP)

Status
HP Aruba Networking Wireless Operating System (aos)
Vendor
CVE Published:
12 May 2026

What is CVE-2026-23824?

The AOS-8 and AOS-10 Operating Systems contain vulnerabilities in their protocol-handling components that can be exploited by unauthenticated attackers. By sending specially crafted network messages, these attackers can trigger a failure in critical system processes, leading to denial-of-service conditions. This is primarily due to insufficient input validation within the affected service, making proper system updates and monitoring essential for maintaining security.

Affected Version(s)

HPE Aruba Networking Wireless Operating System (AOS) 10.8.0.0

HPE Aruba Networking Wireless Operating System (AOS) 10.8.0.0

HPE Aruba Networking Wireless Operating System (AOS) 10.7.0.0 <= 10.7.2.2

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

n3k
.