CVE-2026-23825 — Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component

CVE-2026-23825

Unauthenticated Denial-of-Service via Crafted Messages in a Network Protocol Handling Component PUBLISHED

Description (CNA)

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Aruba Networking Wireless Operating System (AOS)	affected 10.8.0.0; affected 10.7.0.0 through 10.7.2.2; affected 10.4.0.0 through 10.4.1.10

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.