VulnSocial

CVE-2026-23811Disclosure(arubanetworks / 7010)

LOWCVSS 3.1 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In addition to bypassing policy enforcement, successful exploitation - when combined with a port-stealing attack - may enable a bi-directional Machine-in-the-Middle (MitM) attack.

arubanetworks CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-300

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 7010
  • 7030
  • 7205
  • 7210

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-03-04); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
arubanetworks
Products
701070307205721072207240xm728090049004-lte9012

2 versions affected across 18 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-04: 1Mentions · 2026-03-10: 1Technical Details · 2026-03-04: 1Technical Details · 2026-03-10: 103-0403-10
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • DailyCVE@dailycve
    Disclosure

    🟠 HPE, Client Isolation Bypass, #CVE-2026-23811 (MEDIUM) https://dailycve.com/hpe-client-isolation-bypass-cve-2026-23811-medium/

    Post summary

    A link to a dailycve article announces the HPE Client Isolation Bypass vulnerability (CVE‑2026‑23811) with medium severity.

    0000029
    166 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-23811 A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Laye… https://www.cve.org/CVERecord?id=CVE-2026-23811

    Post summary

    A new CVE (2026-23811) describing a flaw in client isolation that could allow L2 communication bypass and traffic redirection was announced, but no PoC, exploit, active exploitation, or patch information is included.

    00000144
    56.6K followersView on X
CPE platform detail19 entries

19 of 19 entries

PartVendorProductVersionTarget SWTarget HW
HWarubanetworks7010---
HWarubanetworks7030---
HWarubanetworks7205---
HWarubanetworks7210---
HWarubanetworks7220---
HWarubanetworks7240xm---
HWarubanetworks7280---
HWarubanetworks9004---
HWarubanetworks9004-lte---
HWarubanetworks9012---
HWarubanetworks9106---
HWarubanetworks9114---
HWarubanetworks9240---
HWarubanetworksap-634---
HWarubanetworksap-635---
HWarubanetworksap-654---
HWarubanetworksap-655---
OSarubanetworksarubaos---
OSarubanetworksarubaos10.8.0.0--

Explore more

Back to dashboardarubanetworks CVEs7010 vulnerabilities