Vulnerability in N/a

CVE-2026-78807

An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

Affected products

  • N/a

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-78807?
CVE-2026-78807 is a high-severity vulnerability in N/a, classified under Origin Validation Error. CVSS score: 7.1/10. Published 2026-09-11.
How severe is CVE-2026-78807?
High severity. CVSS v3 base score is 7.1 out of 10.