CVE catalog

CVE-2026-23825

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messa

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.33% · Oct 25, 2026

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpearubaosNot reported8.10.0.22fixed
CpearubaosNot reported8.12.0.7fixed
CpearubaosNot reported8.13.1.2fixed
CpearubaosNot reported10.4.1.11fixed
CpearubaosNot reported10.7.2.3fixed
Cpesd-wanNot reportedNot reportedunknown
CpearubaosNot reported10.7.2.3fixed
Cpesd-wanNot reportedNot reportedunknown

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
CpearubaoscpeNot reported8.10.0.22Not reportedNot reportedNot reported
CpearubaoscpeNot reported8.12.0.7Not reportedNot reportedNot reported
CpearubaoscpeNot reported8.13.1.2Not reportedNot reportedNot reported
CpearubaoscpeNot reported10.4.1.11Not reportedNot reportedNot reported
CpearubaoscpeNot reported10.7.2.3Not reportedNot reportedNot reported
CpearubaoscpeNot reported10.7.2.3Not reportedNVD-CVE-2026-23825Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]