CVE-2026-23809General(arubanetworks / 7010)

LOWCVSS 7.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs. By leveraging the relationship between BSSIDs and their associated virtual ports, an attacker could potentially bypass inter-BSSID isolation controls. Successful exploitation may enable an attacker to redirect and intercept the victim's network traffic, potentially resulting in eavesdropping, session hijacking, or denial of service.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-400

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 7010
  • 7030
  • 7205
  • 7210

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-03-04); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Products
701070307205721072207240xm728090049004-lte9012

2 versions affected across 18 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-04: 1Mentions · 2026-03-10: 1Technical Details · 2026-03-04: 103-0403-10
Signal classification1 categories
General
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • DailyCVE@dailycve
    General

    🟠 HPE Aruba Wireless, Isolation Bypass, #CVE-2026-23809 (Medium) https://dailycve.com/hpe-aruba-wireless-isolation-bypass-cve-2026-23809-medium/

    Post summary

    The post simply notes the existence of CVE‑2026‑23809 with a medium severity rating and links to a dailyCVE article, without providing any technical, exploit, or patch details.

    0000041
    166 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-23809 A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs. By leveraging the relationship between BSSIDs… https://www.cve.org/CVERecord?id=CVE-2026-23809

    Post summary

    The post highlights a technical discovery of a port‑stealing technique adapted for Wi‑Fi environments using multiple BSSIDs, but does not provide a PoC, exploit, or patch information.

    00000191
    56.6K followersView on X
CPE platform detail19 entries

19 of 19 entries

PartVendorProductVersionTarget SWTarget HW
HWarubanetworks7010---
HWarubanetworks7030---
HWarubanetworks7205---
HWarubanetworks7210---
HWarubanetworks7220---
HWarubanetworks7240xm---
HWarubanetworks7280---
HWarubanetworks9004---
HWarubanetworks9004-lte---
HWarubanetworks9012---
HWarubanetworks9106---
HWarubanetworks9114---
HWarubanetworks9240---
HWarubanetworksap-634---
HWarubanetworksap-635---
HWarubanetworksap-654---
HWarubanetworksap-655---
OSarubanetworksarubaos---
OSarubanetworksarubaos10.8.0.0--

Explore more