CVE-2026-23810
Medium · 4.3CVSS
4.3
EPSS
0.2%
Published
Mar 4, 2026
CISA due date
—
The record
A vulnerability in the packet processing logic may allow an authenticated attacker to craft and transmit a malicious Wi-Fi frame that causes an Access Point (AP) to classify the frame as group-addressed traffic and re-encrypt it using the Group Temporal Key (GTK) associated with the victim's BSSID. Successful exploitation may enable GTK-independent traffic injection and, when combined with a port-stealing technique, allows an attacker to redirect intercepted traffic to facilitate machine-in-the-middle (MitM) attacks across BSSID boundaries.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-84197 In Eclipse Ditto's Node.js JavaScript client, all released versions of… CWE-300
- CVE-2025-29419 CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack. CWE-300
- CVE-2026-23811 A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2… CWE-300
- CVE-2026-23812 A vulnerability has been identified where an attacker connecting to an access point as a… CWE-300
- GHSA-pc5p-h8pf-mvwp Machine-In-The-Middle in https-proxy-agent CWE-300