exploitDog

CVE-2026-23821

Опубликовано: 12 мая 2026

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Note: Access Points running AOS-8 Instant software are not affected by this vulnerability.

Ссылки

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05049en_us&docLocale=en_US
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*

Версия от 6.4.0.0 (включая) до 6.5.4.24 (включая)

cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*

Версия от 8.4.0.0 (включая) до 8.10.0.0 (исключая)

cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*

Версия от 8.11.0.0 (включая) до 8.12.0.7 (исключая)

cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*

Версия от 10.3.0.0 (включая) до 10.4.1.11 (исключая)

cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*

Версия от 10.5.0.0 (включая) до 10.7.2.3 (исключая)

cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00616

Низкий

7.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

GHSA-38g8-3hc5-9xvj

CVSS3: 7.2

github

4 месяца назад

A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system. Note: Access Points running AOS-8 Instant software are not affected by this vulnerability.

EPSS

Процентиль: 48%

0.00616

Низкий

7.2 High

CVSS3

Дефекты

CWE-78