CVE-2026-23601

MEDIUM

Wi-Fi Encryption - Auth Bypass

Title source: llm

Description

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.

Scores

CVSS v3 5.4
EPSS 0.0001
EPSS Percentile 0.2%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Classification

CWE
CWE-327
Status published

Affected Products (2)

arubanetworks/arubaos < 8.10.0.21
arubanetworks/arubaos

Timeline

Published Mar 04, 2026
Tracked Since Mar 05, 2026