CVE-2026-23822
Medium · 5.3CVSS
5.3
EPSS
0.3%
Published
May 12, 2026
CISA due date
—
The record
A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an attacker to cause excessive resource consumption upon user interaction, leading to service disruption or reduced availability of the affected system. NOTE: This vulnerability only impacts Access Points running AOS Instant 8.x.x.x
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-58234 SAP Process Integration (SOAP Adapter) allows a privileged user to send specially crafted… CWE-776
- CVE-2026-16180 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and… CWE-776
- CVE-2026-78681 NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules… CWE-776
- CVE-2026-3415 The XML and schema validation functionalities within the SchemaValidator Mediator process… CWE-776
- CVE-2026-44018 Docling simplifies document processing by parsing diverse formats and providing… CWE-776
- CVE-2026-12993 A flaw was found in Apicurio Registry. CWE-776
- CVE-2026-44020 Docling simplifies document processing by parsing diverse formats and providing… CWE-776
- CVE-2026-45771 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from… CWE-776