Pre-auth XXE on ArubaOS 8.13.2 port 32000 (default-xml-api, no auth required).
Evidence: TCP pcap + sshd 127.0.0.1 log + 9 internal ports via SSRF.
Closed as "theoretical / no valid PoC." Full writeup + PoC + pcap on GitHub.
Click to Open Code Editor