CVE-2026-23811 | BDVDB-2026-318328 Detail
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)
Description#
A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In addition to bypassing policy enforcement, successful exploitation - when combined with a port-stealing attack - may enable a bi-directional Machine-in-the-Middle (MitM) attack.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: adjacent.
Weaknesses#
- CWE-300 Channel Accessible by Non-Endpoint
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.