EUVD-2026-76184
GHSA-3gc7-g84m-84jc
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Local attack requiring low-priv access to wireless subsystem; C:H/I:H reflects full authentication bypass enabling access to mismatched network; no availability impact.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c
AnalysisAI
Missing origin validation in wpa_supplicant's driver-based PMKSA cache selection path allows a local low-privileged attacker to bypass network context and AKMP matching, forcing the supplicant to use a cached Pairwise Master Key Security Association from a mismatched network or authentication method. All wpa_supplicant versions prior to 2.12 are affected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a local low-privileged account on the target device running wpa_supplicant prior to v2.12. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 7.1 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) accurately reflects the local-only attack surface. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade wpa_supplicant to v2.12 or later, which introduces proper network context and AKMP matching validation in the driver-based PMKSA selection path. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all systems running wpa_supplicant to identify deployed versions; restrict or closely monitor access from low-privilege users on WiFi-connected systems. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-346 – Origin Validation Error
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today