Skip to content
OpenAdvisories
High · 7.5 CVE-2026-23824 EUVD-2026-29750GHSA-r9wh-q8f4-8c2p

Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component

Published May 12, 2026 · Updated May 12, 2026 · Assigned by hpe

Description

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS) 10.8.0.0, 10.7.0.0 – ≤ 10.7.2.2, 10.4.0.0 – ≤ 10.4.1.10 —

Advisories 1

References