NetSight
medium5.4

CVE-2026-23601

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions.

Impact

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.

Affected products

VendorProductAffected versions
ArubanetworksArubaos
from 6.5.4.0 through 8.10.0.21
from 8.11.0.0 through 8.12.0.6
from 8.13.0.0 through 8.13.1.1
from 10.3.0.0 through 10.4.1.10
from 10.5.0.0 through 10.7.2.2
Version 10.8.0.0

Weakness classification

References