CVE-2026-23822

5.3 Moyenne

Publiée le 12/05/2026 à 21:16 · Modifiée le 12/08/2026 à 20:41 · Analysée par le NVD · Source : security-alert@hpe.com

Description

A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system. NOTE: This vulnerability only impacts Access Points running AOS Instant 8.x.x.x

Traduire en français

Produits concernés

Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
Arubanetworks arubaos

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	security-alert@hpe.com	`CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-776

Références

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05049en_us&docLocale=en_US Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories