CVE-2026-23811
—CVSS 3.1
3.1 low
EPSS
<1%p5
Published
()
Modified
Description
A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In addition to bypassing policy enforcement, successful exploitation - when combined with a port-stealing attack - may enable a bi-directional Machine-in-the-Middle (MitM) attack.
- Vendors
- arubanetworks
- Products
- arubaos
- Weakness
- CWE-300
- Vector
- CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.