CVEvulnerability

CVE-2026-23601

5.4 MEDIUM Published 2026-03-04 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-03-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-327

Description

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.

Affected configurations

• arubanetworks arubaos (>= 6.5.4.0 <= 8.10.0.21) • arubanetworks arubaos (>= 8.11.0.0 <= 8.12.0.6) • arubanetworks arubaos (>= 8.13.0.0 <= 8.13.1.1) • arubanetworks arubaos (>= 10.3.0.0 <= 10.4.1.10) • arubanetworks arubaos (>= 10.5.0.0 <= 10.7.2.2) • arubanetworks arubaos 10.8.0.0

Related

Weakness · CWE (1)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References