CVE-2026-23819

8.8 Élevée

Publiée le 12/05/2026 à 21:16 · Modifiée le 11/08/2026 à 18:00 · Analysée par le NVD · Source : security-alert@hpe.com

Description

A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim's browser within the same local network. Successful exploitation could allow an attacker to compromise user data and potentially manipulate device configuration settings.

Traduire en français

Produits concernés

Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
Arubanetworks arubaos

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	security-alert@hpe.com	`CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-79

Références

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05049en_us&docLocale=en_US Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories