← Database

CVE-2026-23825

HIGH CVSS: 7.5 Published: 2026-05-12 Modified: 2026-06-17

Description

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.

Affected Platforms

Arubanetworks Sd-WanArubanetworks Arubaos

Weakness Type

CWE-20

References