Medium severity5.4NVD Advisory· Published Mar 4, 2026· Updated Jun 17, 2026
CVE-2026-23809
CVE-2026-23809
Description
A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs. By leveraging the relationship between BSSIDs and their associated virtual ports, an attacker could potentially bypass inter-BSSID isolation controls. Successful exploitation may enable an attacker to redirect and intercept the victim's network traffic, potentially resulting in eavesdropping, session hijacking, or denial of service.
Affected products
3- Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8)v5Range: 10.8.0.0
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*range: >=6.5.4.0,<=8.10.0.21
- cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
0No linked articles in our index yet.