A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
17 Jun 2026, 10:21
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
09 Mar 2026, 19:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:arubanetworks:ap-635:-:*:*:*:*:*:*:* cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:* cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:9106:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:ap-654:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:9114:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:ap-655:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:9240:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:ap-634:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:* cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:* |
|
| First Time |
Arubanetworks 7280
Arubanetworks 9012 Arubanetworks arubaos Arubanetworks Arubanetworks 9106 Arubanetworks ap-655 Arubanetworks 7030 Arubanetworks 7210 Arubanetworks 7010 Arubanetworks 9114 Arubanetworks 7205 Arubanetworks ap-654 Arubanetworks 7220 Arubanetworks ap-634 Arubanetworks 7240xm Arubanetworks 9004 Arubanetworks 9004-lte Arubanetworks 9240 Arubanetworks ap-635 |
|
| References | () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us&docLocale=en_US - Vendor Advisory |
04 Mar 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-327 |
04 Mar 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-04 17:16
Updated : 2026-06-17 10:21
NVD link : CVE-2026-23601
Mitre link : CVE-2026-23601
CVE.ORG link : CVE-2026-23601
JSON object : View
Products Affected
arubanetworks
- 9114
- 7280
- 7240xm
- 9004-lte
- 9106
- 7220
- 9012
- ap-635
- 7030
- 7210
- 9240
- ap-654
- ap-655
- 7205
- 9004
- ap-634
- arubaos
- 7010
CWE
CWE-327
Use of a Broken or Risky Cryptographic Algorithm