CVE-2026-23601

Published: Mar 4, 2026Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: security-alert@hpe.com (Secondary)

Description

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.

Affected (6)

Products: Arubanetworks: Arubaos

Arubanetworks

1 product

Arubaos

Configuration A

6 vulnerable · 17 platform

Vulnerable Software	Affected Versions
Arubanetworks Arubaos	From 10.3.0.0 to 10.4.1.10
Arubanetworks Arubaos	From 10.5.0.0 to 10.7.2.2
Arubanetworks Arubaos	From 6.5.4.0 to 8.10.0.21
Arubanetworks Arubaos	From 8.11.0.0 to 8.12.0.6
Arubanetworks Arubaos	From 8.13.0.0 to 8.13.1.1
Arubanetworks Arubaos	Version 10.8.0.0

Running on/with	Platform Versions
Arubanetworks 7010	All versions
Arubanetworks 7030	All versions
Arubanetworks 7205	All versions
Arubanetworks 7210	All versions
Arubanetworks 7220	All versions
Arubanetworks 7240xm	All versions
Arubanetworks 7280	All versions
Arubanetworks 9004	All versions
Arubanetworks 9004 Lte	All versions
Arubanetworks 9012	All versions
Arubanetworks 9106	All versions
Arubanetworks 9114	All versions
Arubanetworks 9240	All versions
Arubanetworks Ap 634	All versions
Arubanetworks Ap 635	All versions
Arubanetworks Ap 654	All versions
Arubanetworks Ap 655	All versions

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (1)

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US

Source: security-alert@hpe.com

Vendor Advisory

Timeline

No history available yet.