VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 4, 2026· Updated Jun 17, 2026

CVE-2026-23811

CVE-2026-23811

Description

A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In addition to bypassing policy enforcement, successful exploitation - when combined with a port-stealing attack - may enable a bi-directional Machine-in-the-Middle (MitM) attack.

Affected products

4
  • Arubanetworks/Arubaos2 versions
    cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*range: >=6.5.4.0,<=8.10.0.21
    • cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*
  • HPE/Aruballm-fuzzy
  • Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)v5
    Range: 10.8.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.