CVE-2026-23809
7.6
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Exploitability: 2.8 / Impact: 4.7
Source: NVD
Description
A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs. By leveraging the relationship between BSSIDs and their associated virtual ports, an attacker could potentially bypass inter-BSSID isolation controls. Successful exploitation may enable an attacker to redirect and intercept the victim's network traffic, potentially resulting in eavesdropping, session hijacking, or denial of service.
Affected (6)
Products: Arubanetworks: Arubaos
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 10.3.0.0 to 10.4.1.10 |
| Running on/with | Platform Versions |
|---|---|
Arubanetworks 7010 | All versions |
Arubanetworks 7030 | All versions |
Arubanetworks 7205 | All versions |
Arubanetworks 7210 | All versions |
Arubanetworks 7220 | All versions |
Arubanetworks 7240xm | All versions |
Arubanetworks 7280 | All versions |
Arubanetworks 9004 | All versions |
Arubanetworks 9004 Lte | All versions |
Arubanetworks 9012 | All versions |
Arubanetworks 9106 | All versions |
Arubanetworks 9114 | All versions |
Arubanetworks 9240 | All versions |
Arubanetworks Ap 634 | All versions |
Arubanetworks Ap 635 | All versions |
Arubanetworks Ap 654 | All versions |
Arubanetworks Ap 655 | All versions |
References (1)
Source: security-alert@hpe.com
Vendor Advisory
Timeline
No history available yet.