CVE-2026-78807

7.1 highEPSS 0.08%

High (7.1). EPSS 0.08% chance of exploitation in the next 30 days.

An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.08% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-346
Published: 2026-09-11
Modified: 2026-09-22
Record from: the NVD, synced 2026-10-19

References

https://w1.fi/security/2026-2/missing-network-context-validation-for-pmksa-caching.txt

Check your stack JSON