CVE-2026-23812
Security Boundary Bypass via Routing Node Impersonation
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.3EPSS 0.1%KEV nãoPoC —Patch —
Lifecycle
Mar 04, 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-based spoofing technique. Successful exploitation enables the redirection of data streams, allowing for the interception or modification of traffic intended for the legitimate network gateway via a Machine-in-the-Middle (MitM) position.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →