CVE-2026-23827

🗓️ 12 May 2026 18:54:47Reported by hpeType

Unauthenticated remote code execution via heap overflow in Network Management Service on AOS-8 and AOS-10, with potential DoS.

Reporter	Title	Published	Views	Family All 7
CNNVD	HPE Aruba Networking Wireless Operating System 安全漏洞	12 May 202600:00	–	cnnvd
Cvelist	CVE-2026-23827 Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service	12 May 202618:54	–	cvelist
EUVD	EUVD-2026-29753	12 May 202621:31	–	euvd
NVD	CVE-2026-23827	12 May 202620:16	–	nvd
Positive Technologies	PT-2026-40354	12 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-23827	13 May 202620:21	–	redhatcve
Vulnrichment	CVE-2026-23827 Unauthenticated Remote Code Execution via Heap Buffer Overflow in Network Management Service	12 May 202618:54	–	vulnrichment

NVD

Node

arubanetworks arubaosRange6.5.4.0–8.10.0.22

arubanetworks arubaosRange8.11.0.0–8.12.0.7

arubanetworks arubaosRange8.13.0.0–8.13.1.2

arubanetworks arubaosRange10.4.0.0–10.4.1.11

arubanetworks arubaosRange10.5.0.0–10.7.2.3

Node

arubanetworks sd-wanRange8.6.0.4-2.2.0.0–8.6.0.4-2.2.0.7

arubanetworks sd-wanRange8.7.0.0-2.3.0.0–8.7.0.0-2.3.0.9

[
  {
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "product": "HPE Aruba Networking Wireless Operating System (AOS)",
    "versions": [
      {
        "status": "affected",
        "version": "8.13.0.0",
        "lessThanOrEqual": "8.13.1.1",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.12.0.0",
        "lessThanOrEqual": "8.12.0.6",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.10.0.0",
        "lessThanOrEqual": "8.10.0.21",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.8.0.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.7.0.0",
        "lessThanOrEqual": "10.7.2.2",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "10.4.0.0",
        "lessThanOrEqual": "10.4.1.10",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
support	www.support.hpe.com/hpesc/public/docDisplay

15 May 2026 12:45Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.00154

SSVC

CWE-122