CVE-2026-23808
A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthorized frame injection, bypass client isolation, interfere with cross-client traffic, and compromise network segmentation, integrity, and confidentiality.
Vendor
Product
CWE
Yayın Tarihi
2026-03-04 17:16:18
Güncelleme
2026-03-09 19:24:57
Source Identifier
security-alert@hpe.com
KEV Date Added
-