Skip to content
Sign in
5.4 Medium

CVE-2026-23601 A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions

Description

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.

Affected products and versions

Product Affected versions Fixed in
HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) 10.8.0.0 No fix stated
HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) 10.7 10.7.0.0 → 10.7.2.2 No fix stated
HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) 10.4 10.4.0.0 → 10.4.1.10 No fix stated
HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) 8.13 8.13.0.0 → 8.13.1.1 No fix stated
HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) 8.12 8.12.0.0 → 8.12.0.6 No fix stated
HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) 8.10 8.10.0.0 → 8.10.0.21 No fix stated

Other CVEs of HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8)

The 3 CVEs of HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) →
CVE-2026-23809 A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs 5.4 Medium CVE-2026-23808 A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to… 5.4 Medium
Track this CVE