CVE-2026-23822

Katalog CVE

CVSS 5.3 · Medium EPSS 0,26%

Kerentanan Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') pada arubanetworks arubaos. Skor CVSS 3.1 5.3 (Medium) menurut hpe.com.

Deskripsi (NVD)

A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system. NOTE: This vulnerability only impacts Access Points running AOS Instant 8.x.x.x

Rincian

Terbit di NVD

12 Mei 2026

Terakhir diubah

12 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber hpe.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05049en_us&docLocale=en_US advisory vendor