CVE-2026-23601 — Use of a Broken or Risky Cryptographic Algorithm in Packard Enterprise HPE Aruba Networking Wireless Operating System
Severity
5.4MEDIUMNVD
EPSS
0.0%
top 99.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 4
Description
A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of tampered data to specific endpoints, bypassing standard cryptographic separation.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.5
Affected Packages2 packages
▶CVEListV5hewlett_packard_enterprise/hpe_aruba_networking_wireless_operating_system10.7.0.0 — 10.7.2.2+5