Pre-Authentication ICMP Reflection & Smurf Amplification in ArubaOS 8.13.2.0
A 28-year-old vulnerability class — Smurf amplification — alive in an enterprise controller shipping in 2026. Two independent packet captures prove reflection. Bugcrowd called it expected behavior. No fix issued.