What is the CVSS score of CVE-2026-23824?

CVE-2026-23824 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of HPE Aruba AOS are affected by CVE-2026-23824?

HPE Aruba Networking AOS-8 and AOS-10 wireless controllers are vulnerable to remote denial-of-service attacks that can crash critical system processes and disrupt wireless network operations for all…

How to fix or mitigate CVE-2026-23824?

Within 24 hours, identify and inventory all HPE Aruba Networking controllers running AOS-8 or AOS-10 and document current firmware versions across all wireless management domains; simultaneously alert the security and infrastructure teams to implement interim mitigations. Within 7 days, deploy compensating controls including network segmentation to restrict management interface access to authorized administrators only, implement rate limiting on protocol-handling services, and enable enhanced alerting for unexpected process crashes or controller restarts. Within 30 days, establish a regular cadence with HPE/Aruba for patch availability and test releases in a lab environment, develop a DoS incident response runbook specific to wireless infrastructure, and conduct a full operational test of all deployed mitigations under normal production load to ensure effectiveness without impacting legitimate wireless users.

HPE Aruba AOS CVE-2026-23824

EUVD-2026-29750 HIGH

Uncontrolled Resource Consumption (CWE-400)

2026-05-12 hpe

GHSA-r9wh-q8f4-8c2p

Denial Of Service Hpe Aruba Networking Wireless Operating System Aos Hewlett Packard Enterprise Hpe

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

7.5 HIGH

Unauthenticated network-reachable service with low-complexity malformed input causing a process crash, so PR:N/AC:L/AV:N with availability-only impact (C:N/I:N/A:H).

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 23, 2026 - 19:59 vuln.today

CVE Published

May 12, 2026 - 18:51 nvd

HIGH 7.5

DescriptionCVE.org

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.

AnalysisAI

Denial-of-service in HPE Aruba Networking Wireless Operating System (AOS-8 and AOS-10) allows a remote unauthenticated attacker to crash a critical system process by sending specially crafted network messages to a protocol-handling service. Because input validation is insufficient, a successful attack terminates the process and disrupts wireless network operations without affecting confidentiality or integrity. There is no public exploit identified at time of analysis, and the EPSS score is very low (0.03%), indicating no observed exploitation activity.

Technical ContextAI

The affected component is a protocol-handling service within HPE Aruba's wireless controller/gateway operating systems (AOS-8 and AOS-10), which run on Aruba mobility controllers and gateways managing enterprise Wi-Fi infrastructure. The root cause is classified as CWE-400 (Uncontrolled Resource Consumption): malformed network messages are not properly validated, and processing them drives a critical daemon into a fault state that terminates the process. The CPE identifies the product as cpe:2.3:a:hewlett_packard_enterprise_(hpe):hpe_aruba_networking_wireless_operating_system_(aos), confirming the affected asset is the network OS itself rather than a client application. Because the vulnerable service listens on the network and requires no authentication, any host able to reach the listening service can send the triggering traffic.

RemediationAI

Consult the HPE security advisory at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US for the exact fixed builds and upgrade to a patched AOS release above the affected ranges (i.e., beyond AOS 10.4.1.10 on the 10.4 branch, beyond 10.7.2.2 on the 10.7 branch, and the fixed 10.8.x and AOS-8 builds the advisory specifies); no exact fixed version number is provided in the input data, so treat the advisory as authoritative for the precise target build (Patch available per vendor advisory). As a compensating control until patching, restrict network reachability of the vulnerable protocol-handling service - place controller/gateway management and control-plane interfaces on isolated management VLANs, apply ACLs or firewall rules so only trusted management hosts can reach the service, and block untrusted access to the affected ports at the perimeter; the trade-off is that overly broad filtering can disrupt legitimate cluster, tunnel, or AP-to-controller communications, so scope rules to the specific service and validate control-plane connectivity after applying them.