Ad

CVE-2026-23601

MEDIUM CVSS 3.1: 5.4 EPSS 0.01%
Updated Mar 04, 2026
wireless
Parameter Value
CVSS 5.4 (MEDIUM)
Type CWE-327 (Weak Crypto Algorithm)
Vendor wireless
Public PoC No

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.

Attack Parameters

Attack Vector
Adjacent
Requires local network access
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
None
No disruption

CVSS Vector v3.1