CVE-2026-23601
MEDIUMWi-Fi Encryption - Auth Bypass
Title source: llmDescription
A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.
Scores
CVSS v3
5.4
EPSS
0.0001
EPSS Percentile
0.2%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Classification
CWE
CWE-327
Status
published
Affected Products (2)
arubanetworks/arubaos
< 8.10.0.21
arubanetworks/arubaos
Timeline
Published
Mar 04, 2026
Tracked Since
Mar 05, 2026