VYPR
← All advisories
High severity8.8NVD Advisory· Published May 12, 2026· Updated Aug 11, 2026

CVE-2026-23819

CVE-2026-23819

Description

A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim's browser within the same local network. Successful exploitation could allow an attacker to compromise user data and potentially manipulate device configuration settings.

Affected products

4
  • Arubanetworks/Arubaos2 versions
    cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*range: >=6.4.0.0,<=6.5.4.24
    • cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*
  • HPE/Access Pointsllm-fuzzy
  • HPE/AOSllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.