Heap-Based Buffer Overflow in AOS-8 and AOS-10 Network Management Service

CVE-2026-23827

What is CVE-2026-23827?

A heap-based buffer overflow vulnerability has been identified in the network management service of AOS-8 and AOS-10. This flaw allows an unauthenticated remote attacker to potentially execute arbitrary code with privileged user rights on the affected operating system. The exploitation of this vulnerability could lead to severe consequences, including unauthorized access and control over the system, as well as a denial-of-service (DoS) condition affecting the system's processes. Users of these products are urged to review the security updates provided by Hewlett Packard Enterprise to mitigate potential risks.

References