CVE-2026-23825

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.

• CWE-20

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_USVendor Advisory

Published

May 12, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2382The FPW Category Thumbnails plugin for WordPress is vulnerab…6.4
• CVE-2026-23820A vulnerability in the command line interface of Access Poin…7.2
• CVE-2026-23821A vulnerability in the configuration processing logic of Acc…7.2
• CVE-2026-23822A vulnerability in the XML handling component of AOS-8 DHCP …5.3
• CVE-2026-23823A vulnerability in the command line interface of Access Poin…7.2
• CVE-2026-23824Vulnerabilities exist in a protocol-handling component of AO…7.5
• CVE-2026-23826A vulnerability in a network management service of AOS-8 Ope…7.5
• CVE-2026-23827A heap-based buffer overflow vulnerability exists in a Netwo…7.5
• CVE-2026-23829Mailpit is an email testing tool and API for developers. Pri…5.3
• CVE-2026-2383The Simple Download Monitor plugin for WordPress is vulnerab…6.4
• CVE-2026-23830SandboxJS is a JavaScript sandboxing library. Versions prior…10
• CVE-2026-23831Rekor is a software supply chain transparency log. In versio…5.3