← Database

CVE-2026-23809

MEDIUM CVSS: 5.4 Published: 2026-03-04 Modified: 2026-06-17

Description

A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs. By leveraging the relationship between BSSIDs and their associated virtual ports, an attacker could potentially bypass inter-BSSID isolation controls. Successful exploitation may enable an attacker to redirect and intercept the victim's network traffic, potentially resulting in eavesdropping, session hijacking, or denial of service.

Affected Platforms

Arubanetworks Ap-635Arubanetworks 7205Arubanetworks 9012Arubanetworks 7210Arubanetworks 9004Arubanetworks 7010Arubanetworks Ap-634Arubanetworks Ap-655Arubanetworks ArubaosArubanetworks 9106

Weakness Type

CWE-400

References