VulnSocial

CVE-2026-23812Disclosure(arubanetworks / 7010)

LOWCVSS 4.2 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-based spoofing technique. Successful exploitation enables the redirection of data streams, allowing for the interception or modification of traffic intended for the legitimate network gateway via a Machine-in-the-Middle (MitM) position.

arubanetworks CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-300

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 7010
  • 7030
  • 7205
  • 7210

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-03-04); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
arubanetworks
Products
701070307205721072207240xm728090049004-lte9012

2 versions affected across 18 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-03-04: 1Mentions · 2026-03-10: 1Technical Details · 2026-03-10: 103-0403-10
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • DailyCVE@dailycve
    Disclosure

    🟠 HPE Access Points, Address Spoofing Vulnerability, #CVE-2026-23812 (Medium) https://dailycve.com/hpe-access-points-address-spoofing-vulnerability-cve-2026-23812-medium/

    Post summary

    The post announces a medium‑severity address spoofing vulnerability (CVE‑2026‑23812) affecting HPE Access Points, without providing any PoC, exploit, or mitigation details.

    0000032
    166 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-23812 A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an … https://www.cve.org/CVERecord?id=CVE-2026-23812

    Post summary

    The message announces CVE-2026-23812, describing a vulnerability where a client can impersonate a gateway, but offers no further technical or mitigation details.

    00000155
    56.6K followersView on X
CPE platform detail19 entries

19 of 19 entries

PartVendorProductVersionTarget SWTarget HW
HWarubanetworks7010---
HWarubanetworks7030---
HWarubanetworks7205---
HWarubanetworks7210---
HWarubanetworks7220---
HWarubanetworks7240xm---
HWarubanetworks7280---
HWarubanetworks9004---
HWarubanetworks9004-lte---
HWarubanetworks9012---
HWarubanetworks9106---
HWarubanetworks9114---
HWarubanetworks9240---
HWarubanetworksap-634---
HWarubanetworksap-635---
HWarubanetworksap-654---
HWarubanetworksap-655---
OSarubanetworksarubaos---
OSarubanetworksarubaos10.8.0.0--

Explore more

Back to dashboardarubanetworks CVEs7010 vulnerabilities