← Database

CVE-2026-23822

MEDIUM CVSS: 5.3 Published: 2026-05-12 Modified: 2026-08-12

Description

A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system. NOTE: This vulnerability only impacts Access Points running AOS Instant 8.x.x.x

Affected Platforms

Arubanetworks Arubaos

Weakness Type

CWE-776

References