CVE-2026-23822

EUVD-2026-29738
A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system.








NOTE: This vulnerability only impacts Access Points running AOS Instant 8.x.x.x
XML Entity Expansion
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 16.13%
Affected Products (NVD)
VendorProductVersion
arubanetworksarubaos
6.4.0.0 ≤
𝑥
≤ 6.5.4.24
arubanetworksarubaos
8.4.0.0 ≤
𝑥
< 8.10.0.22
arubanetworksarubaos
8.11.0.0 ≤
𝑥
< 8.12.0.7
arubanetworksarubaos
8.13.0.0 ≤
𝑥
< 8.13.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05049en_us&docLocale=en_US