CVE-2026-23812
Medium · 4.3CVSS
4.3
EPSS
0.1%
Published
Mar 4, 2026
CISA due date
—
The record
A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless client can impersonate a gateway by leveraging an address-based spoofing technique. Successful exploitation enables the redirection of data streams, allowing for the interception or modification of traffic intended for the legitimate network gateway via a Machine-in-the-Middle (MitM) position.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-84197 In Eclipse Ditto's Node.js JavaScript client, all released versions of… CWE-300
- CVE-2025-29419 CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack. CWE-300
- CVE-2026-23811 A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2… CWE-300
- CVE-2026-23810 A vulnerability in the packet processing logic may allow an authenticated attacker to… CWE-300
- GHSA-pc5p-h8pf-mvwp Machine-In-The-Middle in https-proxy-agent CWE-300