CVE-2026-23808 (GCVE-0-2026-23808)

Vulnerability from cvelistv5 – Published: 2026-03-04 16:09 – Updated: 2026-04-01 16:22
VLAI
Title
Client Isolation Bypass via GTK Manipulation
Summary
A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthorized frame injection, bypass client isolation, interfere with cross-client traffic, and compromise network segmentation, integrity, and confidentiality.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-03-04 17:39 UTC
CWE
  • CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
Impacted products
Vendor Product Version CPE status
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) Affected: 10.8.0.0 (semver)
Affected: 10.7.0.0 , ≤ 10.7.2.2 (semver)
Affected: 10.4.0.0 , ≤ 10.4.1.10 (semver)
Affected: 8.13.0.0 , ≤ 8.13.1.1 (semver)
Affected: 8.12.0.0 , ≤ 8.12.0.6 (semver)
Affected: 8.10.0.0 , ≤ 8.10.0.21 (semver)
guessed Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-23808",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-04T17:39:52.989852Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-04T17:42:48.840Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "HPE Aruba Networking Wireless Operating System (AOS-10 \u0026 AOS-8)",
          "vendor": "Hewlett Packard Enterprise (HPE)",
          "versions": [
            {
              "status": "affected",
              "version": "10.8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.7.2.2",
              "status": "affected",
              "version": "10.7.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "10.4.1.10",
              "status": "affected",
              "version": "10.4.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.13.1.1",
              "status": "affected",
              "version": "8.13.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.12.0.6",
              "status": "affected",
              "version": "8.12.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.0.21",
              "status": "affected",
              "version": "8.10.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Xin\u0027an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian, Zhaowei Tan,Srikanth V. Krishnamurthy from University of California, and Mathy Vanhoef from DistriNet, KU Leuven"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthorized frame injection, bypass client isolation, interfere with cross-client traffic, and compromise network segmentation, integrity, and confidentiality.\u003c/p\u003e"
            }
          ],
          "value": "A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthorized frame injection, bypass client isolation, interfere with cross-client traffic, and compromise network segmentation, integrity, and confidentiality."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-01T16:22:33.826Z",
        "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "shortName": "hpe"
      },
      "references": [
        {
          "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us\u0026docLocale=en_US"
        }
      ],
      "source": {
        "advisory": "HPESBNW05026",
        "discovery": "EXTERNAL"
      },
      "title": "Client Isolation Bypass via GTK Manipulation",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
    "assignerShortName": "hpe",
    "cveId": "CVE-2026-23808",
    "datePublished": "2026-03-04T16:09:17.967Z",
    "dateReserved": "2026-01-16T15:22:38.201Z",
    "dateUpdated": "2026-04-01T16:22:33.826Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-23808",
      "date": "2026-09-23",
      "epss": "0.00264",
      "percentile": "0.18635"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "affected",
                "product": "HPE Aruba Networking Wireless Operating System (AOS-10 \u0026 AOS-8)",
                "vendor": "Hewlett Packard Enterprise (HPE)",
                "versions": [
                  {
                    "status": "affected",
                    "version": "10.8.0.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "10.7.2.2",
                    "status": "affected",
                    "version": "10.7.0.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "10.4.1.10",
                    "status": "affected",
                    "version": "10.4.0.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.13.1.1",
                    "status": "affected",
                    "version": "8.13.0.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.12.0.6",
                    "status": "affected",
                    "version": "8.12.0.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.10.0.21",
                    "status": "affected",
                    "version": "8.10.0.0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "security-alert@hpe.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2B8A04E5-890D-4CBC-B504-2F50294C49A1",
                    "versionEndIncluding": "8.10.0.21",
                    "versionStartIncluding": "6.5.4.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "33943569-C024-4615-BA2C-874DD71EC077",
                    "versionEndIncluding": "8.12.0.6",
                    "versionStartIncluding": "8.11.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9F95C3EA-87DF-448B-B63D-E469A38650AE",
                    "versionEndIncluding": "8.13.1.1",
                    "versionStartIncluding": "8.13.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0ECE682E-B356-4960-AC0F-4C066B8CB7EE",
                    "versionEndIncluding": "10.4.1.10",
                    "versionStartIncluding": "10.3.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3E7CE262-1F72-4AE3-BE71-9E09EBF64B02",
                    "versionEndIncluding": "10.7.2.2",
                    "versionStartIncluding": "10.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:arubanetworks:arubaos:10.8.0.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "291A71D4-415C-4478-9BC1-1873ED23B6E1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "59612211-5054-44DC-B028-61A2C5C6133D",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E8E68DB6-149B-4469-BD27-69F1AC59166F",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2E9AA178-1327-402E-8740-8409ECA448BC",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9969F899-4D7A-4DD5-B81D-DB16B20CF86A",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CF33BAD0-0596-4910-B096-99E2033F73D8",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FDDFDA5E-3895-463A-86EA-1823EC1B5045",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3BBA9A71-BE10-471A-A8BE-5CCB8CE8393F",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CFA13FF5-7C60-48B4-AF46-18A9F19D5D42",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0B1EB3D9-77B5-4DBE-9518-23DD0DA06BC9",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:9012:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "17162DB3-973E-47C6-9157-39A0E94603F2",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:9106:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "086E2884-82B9-4909-973A-2AF9796EE6A3",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:9114:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D6758409-B957-486D-96C0-BCDD91BE4E8A",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:9240:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A6BF9E0D-630F-40B4-9109-560CA13C981B",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:ap-634:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "69298E74-9FC7-4E96-9581-2B7F5CDD8956",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:ap-635:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B0219C4A-855C-4CCC-9C56-499697A91B94",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:ap-654:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7E4B96D6-2695-43E4-9956-872E0661B9ED",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:arubanetworks:ap-655:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D18C831D-4D5C-4A50-8101-2CFB3D1B5210",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthorized frame injection, bypass client isolation, interfere with cross-client traffic, and compromise network segmentation, integrity, and confidentiality."
          },
          {
            "lang": "es",
            "value": "Se ha identificado una vulnerabilidad en un protocolo de itinerancia inal\u00e1mbrica estandarizado que podr\u00eda permitir a un actor malicioso instalar una Clave Temporal de Grupo (GTK) controlada por el atacante en un dispositivo cliente. La explotaci\u00f3n exitosa de esta vulnerabilidad podr\u00eda permitir a un actor malicioso remoto realizar inyecci\u00f3n de tramas no autorizada, eludir el aislamiento del cliente, interferir con el tr\u00e1fico entre clientes y comprometer la segmentaci\u00f3n, integridad y confidencialidad de la red."
          }
        ],
        "id": "CVE-2026-23808",
        "lastModified": "2026-06-17T10:22:08.013",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 2.5,
              "source": "security-alert@hpe.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 8.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.2,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-23808",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-04T17:39:52.989852Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-03-04T17:16:18.760",
        "references": [
          {
            "source": "security-alert@hpe.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us\u0026docLocale=en_US"
          }
        ],
        "sourceIdentifier": "security-alert@hpe.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-94"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-03-27T08:02:22+00:00",
      "cve": "CVE-2026-23808",
      "id": "CVE-2026-23808",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Client Isolation Bypass via GTK Manipulation",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23808.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-23808",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-03-04T17:39:52.989852Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-94",
                    "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-03-04T17:40:39.809Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "HPE Aruba Networking Wireless Operating System (AOS-10 \u0026 AOS-8)",
              "vendor": "Hewlett Packard Enterprise (HPE)",
              "versions": [
                {
                  "status": "affected",
                  "version": "10.8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.7.2.2",
                  "status": "affected",
                  "version": "10.7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.4.1.10",
                  "status": "affected",
                  "version": "10.4.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.1.1",
                  "status": "affected",
                  "version": "8.13.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.12.0.6",
                  "status": "affected",
                  "version": "8.12.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "10.13.0.21",
                  "status": "affected",
                  "version": "8.10.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Xin\u0027an Zhou, Juefei Pu, Zhutian Liu, Zhiyun Qian, Zhaowei Tan,Srikanth V. Krishnamurthy from University of California, and Mathy Vanhoef from DistriNet, KU Leuven"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthorized frame injection, bypass client isolation, interfere with cross-client traffic, and compromise network segmentation, integrity, and confidentiality.\u003c/p\u003e"
                }
              ],
              "value": "A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key (GTK) on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthorized frame injection, bypass client isolation, interfere with cross-client traffic, and compromise network segmentation, integrity, and confidentiality."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-03-04T16:09:17.967Z",
            "orgId": "eb103674-0d28-4225-80f8-39fb86215de0",
            "shortName": "hpe"
          },
          "references": [
            {
              "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05026en_us\u0026docLocale=en_US"
            }
          ],
          "source": {
            "advisory": "HPESBNW05026",
            "discovery": "EXTERNAL"
          },
          "title": "Client Isolation Bypass via GTK Manipulation",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0",
        "assignerShortName": "hpe",
        "cveId": "CVE-2026-23808",
        "datePublished": "2026-03-04T16:09:17.967Z",
        "dateReserved": "2026-01-16T15:22:38.201Z",
        "dateUpdated": "2026-03-04T17:42:48.840Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…