VYPR
Medium severity4.3NVD Advisory· Published Mar 4, 2026· Updated Jun 17, 2026

CVE-2026-23812

CVE-2026-23812

Description

A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-based spoofing technique. Successful exploitation enables the redirection of data streams, allowing for the interception or modification of traffic intended for the legitimate network gateway via a Machine-in-the-Middle (MitM) position.

Affected products

4
  • cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*range: >=6.5.4.0,<=8.10.0.21
    • cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*
  • Hewlett Packard Enterprise (HPE)/HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)v5
    Range: 10.8.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.