PatchSiren cyber security CVE debrief
CVE-2026-78807 wpa_supplicant CVE debrief
A local attacker can bypass proper network context and AKMP matching for PMKSA caching in wpa_supplicant versions before v.2.12 due to missing validation in the driver-based PMKSA selection path. This vulnerability allows for potential unauthorized access to network resources. Network administrators and security teams should verify and apply patches for versions before v.2.12, review network configurations, and monitor for local attacks. The CVE record and NVD entry provide details on the vulnerability, but further verification is required for affected versions and potential impact.
- Vendor
- wpa_supplicant
- Product
- wpa_supplicant
- CVSS
- HIGH 7.1
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-09-11
- Original CVE updated
- 2026-09-11
- Advisory published
- 2026-09-11
- Advisory updated
- 2026-09-11
Who should care
Network administrators and security teams responsible for managing wpa_supplicant installations should verify and apply patches for versions before v.2.12.
Why it matters
CVE-2026-78807 allows local attackers to bypass network context and AKMP matching for PMKSA caching in wpa_supplicant versions before v.2.12. Network administrators and security teams should verify and apply patches, review network configurations, and monitor for local attacks.
- Local attackers can bypass network context and AKMP matching for PMKSA caching
- Potential unauthorized access to network resources
- Need to verify and apply patches for wpa_supplicant versions before v.2.12
- Further verification required for affected versions and potential impact
Technical summary
The vulnerability in wpa_supplicant versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver-based PMKSA selection path in wpa.c. This issue arises from the lack of validation in the driver-based PMKSA selection path, which can lead to unauthorized access. Affected systems require patches to be applied to prevent exploitation.
Defensive priority
Verify and apply patches for wpa_supplicant versions before v.2.12
Recommended defensive actions
- Verify wpa_supplicant version and apply patches for versions before v.2.12
- Review network configurations for potential exposure
- Monitor for local attacks on wpa_supplicant
Evidence notes
The CVE record and NVD entry provide details on the vulnerability in wpa_supplicant. However, the scope of affected versions and potential impact require further verification.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-78807 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-78807
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-78807 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-78807
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Source reference
Unverified legacy reference
URL: https://w1.fi/security/2026-2/missing-network-context-validation-for-pmksa-caching.txt
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.