High [CVE-2026-23826] AOS-8: vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by sending specially crafted network packets to the affected device, potentially resulting in a denial-of-service condition
This high-severity HPE Aruba Networking advisory covers CVE-2026-23826 affecting AOS-8.
Android app · Google Play
Monitor future HPE Aruba Networking CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by sending specially crafted network packets to the affected device, potentially resulting in a denial-of-service condition.
Successful exploitation could cause the affected service process to terminate unexpectedly, disrupting normal device operations.
- AOS-8 Mobility 8.13.0.0 through 8.13.1.1
- AOS-8 Mobility 8.12.0.0 through 8.12.0.6
- AOS-8 Mobility 8.10.0.0 through 8.10.0.21
Official advisory · high-confidence parse· fetched 1 month ago·verify at source
- AOS-8 Mobility 8.13.1.2 or above
- AOS-8 Mobility 8.12.0.7 or above
- AOS-8 Mobility 8.10.0.22 or above
Official advisory · high-confidence parse· fetched 1 month ago·verify at source
Mitigation checklist
- Upgrade affected HPE Aruba Networking devices to an applicable fixed release: AOS-8 Mobility 8.13.1.2 or above, AOS-8 Mobility 8.12.0.7 or above, AOS-8 Mobility 8.10.0.22 or above.
- Upgrade Mobility Conductors, Controllers, and Gateways to one of the following AOS-10 or AOS-8 versions (as applicable) to resolve the vulnerabilities described in the details section: - AOS-8.13.x.x: 8.13.1.2 and above; - AOS-8.12.x.x: 8.12.0.7 and above; - AOS-8.10.x.x: 8.10.0.22 and above.
- To minimize the likelihood of an attacker exploiting this vulnerability, HPE Aruba Networking recommends that the CLI and web-based management interfaces be restricted to a dedicated layer 2 segment/VLAN and/or controlled by firewall policies at layer 3 and above, along with accounting controls for tracking and logging user activities and resource usage.
Official advisory · high-confidence parse· fetched 1 month ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.