CVE-2026-23819

Name of the Vulnerable Software and Affected Versions Access Points running AOS-10 (affected versions not specified) Access Points running AOS-8 Instant (affected versions not specified)

Description A flaw in the web-based management interface allows an unauthenticated remote attacker on the same local network to execute arbitrary JavaScript code in a victim's browser. This could lead to the compromise of user data and the potential manipulation of device configuration settings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.