CVE-2026-78807HighCVSS 7.1

An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c

Published
September 21, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2026-78807 →

🎯 Affected products1

  • azl3 wpa_supplicant 2.10-3 on Azure Linux 3.0

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)