Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-23822

Опубликовано: 12 мая 2026
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system.

NOTE: This vulnerability only impacts Access Points running AOS Instant 8.x.x.x

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
Версия от 6.4.0.0 (включая) до 6.5.4.24 (включая)
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
Версия от 8.4.0.0 (включая) до 8.10.0.22 (исключая)
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
Версия от 8.11.0.0 (включая) до 8.12.0.7 (исключая)
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
Версия от 8.13.0.0 (включая) до 8.13.1.2 (исключая)

EPSS

Процентиль: 18%
0.00263
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-776

Связанные уязвимости

CVSS3: 5.3
github
4 месяца назад

A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system. NOTE: This vulnerability only impacts Access Points running AOS Instant 8.x.x.x

EPSS

Процентиль: 18%
0.00263
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-776