CVE advisoryCRITICAL
CVE-2024-26305
ArubaOS and SD-WAN PAPI Unauthenticated Remote Code Execution
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical buffer overflow vulnerability exists in the Utility daemon impacting Aruba network management technology. This flaw allows unauthenticated remote attackers to execute arbitrary code as a privileged user by sending specially crafted packets to the PAPI UDP port. This could affect system integrity and confiden