CVE-2026-23601: Frame Injection via Shared GTK Allows Traffic Spoofing and Client Compromise
A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23601?
CVE-2026-23601 is classified as a high-severity vulnerability because it allows for traffic spoofing and potential compromise of client devices.
How do I fix CVE-2026-23601?
To fix CVE-2026-23601, you should update your ArubaOS software to a version that is not vulnerable to this issue.
What types of attacks can be executed using CVE-2026-23601?
CVE-2026-23601 allows attackers to perform traffic spoofing, which can lead to unauthorized access and client compromise.
Which versions of ArubaOS are affected by CVE-2026-23601?
CVE-2026-23601 affects multiple ArubaOS versions ranging from 6.5.4.0 to 10.8.0.0, including several versions in between.
What is the impact of exploiting CVE-2026-23601?
Exploiting CVE-2026-23601 can result in compromised network integrity, leading to data interception and unauthorized actions on affected client devices.