CVE-2026-23809

Description

A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs. By leveraging the relationship between BSSIDs and their associated virtual ports, an attacker could potentially bypass inter-BSSID isolation controls. Successful exploitation may enable an attacker to redirect and intercept the victim's network traffic, potentially resulting in eavesdropping, session hijacking, or denial of service.

Weakness classification

• 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-400

Primary references

• security-alert@hpe.com — Vendor Advisory