CVE-2026-78807
HighCVSS 7.1Summary
In wpa_supplicant all versions before 2.12, a missing validation in the driver-based PMKSA selection path in wpa.c allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching.
Risk Assessment
A local attacker can bypass wireless network security mechanisms and gain unauthorized access to the network. This may lead to a breach of Wi-Fi communication confidentiality.
Recommendation
Update wpa_supplicant to version 2.12 or later. Until then, restrict local access to systems using this software.
Other vulnerabilities in wpa_supplicant
See all- CVE-2016-4477High
wpa_supplicant versions 0.4.0 through 2.5 do not reject and characters in passphrase parameters, allowing local users to trigger arbitrary library loading and consequently gain privileges or cause a denial of service (daemon outage) via a crafted SET, SET_CRED, or SET_NETWORK command.
- CVE-2026-21094High
Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.
Original NVD description (English source)
An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c