Skip to main content

CVE-2026-23822

| EUVD-2026-29738 MEDIUM
Improper Restriction of Recursive Entity References in DTDs (CWE-776)
2026-05-12 hpe GHSA-xrfm-m363-m483
5.3
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
May 12, 2026 - 18:37 nvd
MEDIUM 5.3

DescriptionNVD

A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system.

NOTE: This vulnerability only impacts Access Points running AOS Instant 8.x.x.x

Analysis

A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Share

CVE-2026-23822 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy