1. Home
  2. CVE Database
  3. CVE-2026-23811
MEDIUM · 4.3

CVE-2026-23811

A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In addition to bypassing...

Vulnerability Description

A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In addition to bypassing policy enforcement, successful exploitation - when combined with a port-stealing attack - may enable a bi-directional Machine-in-the-Middle (MitM) attack.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ArubanetworksArubaos>= 6.5.4.0, <= 8.10.0.21
Arubanetworks7010-
Arubanetworks7030-
Arubanetworks7205-
Arubanetworks7210-
Arubanetworks7220-
Arubanetworks7240Xm-
Arubanetworks7280-
Arubanetworks9004-
Arubanetworks9004-Lte-
Arubanetworks9012-
Arubanetworks9106-
Arubanetworks9114-
Arubanetworks9240-
ArubanetworksAp-634-
ArubanetworksAp-635-
ArubanetworksAp-654-
ArubanetworksAp-655-

Related Weaknesses (CWE)

CWE-300

References

FAQ

What is CVE-2026-23811?

CVE-2026-23811 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restrictions between clients and redirect traffic at Layer 3 (L3). In addition to bypassing...

How severe is CVE-2026-23811?

CVE-2026-23811 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-23811?

Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Arubaos, Arubanetworks 7010, Arubanetworks 7030, Arubanetworks 7205, Arubanetworks 7210.