{"id":"CVE-2026-78807","aliases":["AZL-103386","DEBIAN-CVE-2026-78807","EUVD-2026-76184","GHSA-3gc7-g84m-84jc","SUSE-SU-2026:24096-1","SUSE-SU-2026:24132-1","SUSE-SU-2026:24144-1","SUSE-SU-2026:24278-1","SUSE-SU-2026:4492-1","SUSE-SU-2026:4494-1","SUSE-SU-2026:4587-1","SUSE-SU-2026:4588-1","SUSE-SU-2026:4590-1","UBUNTU-CVE-2026-78807","openSUSE-SU-2026:22022-1"],"status":"published","title":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper...","description":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.0008,"percentile":0.00161,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-346"],"published":"2026-09-11T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Debian:14","package":"wpa","fixed_in":["2:2.11-4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"wpa_supplicant","fixed_in":["2.11-160000.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"wpa_supplicant","fixed_in":["2.10-159998.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"wpa_supplicant","fixed_in":["2.11-160000.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"wpa_supplicant","fixed_in":["2.11-160000.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"wpa_supplicant","fixed_in":["2.11-slfo.1.1_3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"wpa_supplicant","fixed_in":["2.9-23.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"wpa_supplicant","fixed_in":["2.9-23.26.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"wpa_supplicant","fixed_in":["2.9-150000.4.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"wpa_supplicant","fixed_in":["2.9-150000.4.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"wpa_supplicant","fixed_in":["2.9-150000.4.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"wpa_supplicant","fixed_in":["2.9-150000.4.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"wpa_supplicant","fixed_in":["2.9-150000.4.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"wpa_supplicant","fixed_in":["2.9-150000.4.45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wpa_supplicant","fixed_in":["2.11-150700.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"wpa_supplicant","fixed_in":["2.10-150500.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"wpa_supplicant","fixed_in":["2.10-150500.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"wpa_supplicant","fixed_in":["2.10-150500.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"wpa_supplicant","fixed_in":["2.10-150500.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"wpa_supplicant","fixed_in":["2.10-150500.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"wpa_supplicant","fixed_in":["2.11-160000.5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.12-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.10-12","2:2.10-12+deb12u1","2:2.10-12+deb12u2","2:2.10-12+deb12u3","2:2.10-13","2:2.10-14","2:2.10-15","2:2.10-16","2:2.10-17","2:2.10-18","2:2.10-20","2:2.10-21","2:2.10-21.1","2:2.10-22","2:2.10-23","2:2.10-24","2:2.10-25","2:2.11-1","2:2.11-2","2:2.11-3","2:2.11-4"]},{"source":"osv","ecosystem":"Debian:13","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.10-24","2:2.10-25","2:2.11-1","2:2.11-2","2:2.11-3","2:2.11-4"]},{"source":"osv","ecosystem":"Debian:14","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.11-4"}]}],"versions":["2:2.10-24","2:2.10-25","2:2.11-1","2:2.11-2","2:2.11-3"]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-160000.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-159998.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-160000.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-160000.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-slfo.1.1_3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150600.7.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150600.7.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-23.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-23.26.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-150700.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150500.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150500.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150500.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150500.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150500.3.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0-3ubuntu2","1.0-3ubuntu3","1.0-3ubuntu4","2.1-0ubuntu1","2.1-0ubuntu1.1","2.1-0ubuntu1.2","2.1-0ubuntu1.3","2.1-0ubuntu1.4","2.1-0ubuntu1.5","2.1-0ubuntu1.6","2.1-0ubuntu1.7","2.1-0ubuntu1.7+esm1","2.1-0ubuntu1.7+esm2","2.1-0ubuntu1.7+esm3","2.1-0ubuntu1.7+esm4","2.1-0ubuntu1.7+esm5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4-0ubuntu3","2.4-0ubuntu4","2.4-0ubuntu5","2.4-0ubuntu6","2.4-0ubuntu6.2","2.4-0ubuntu6.3","2.4-0ubuntu6.4","2.4-0ubuntu6.5","2.4-0ubuntu6.6","2.4-0ubuntu6.7","2.4-0ubuntu6.8","2.4-0ubuntu6.8+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4-0ubuntu10","2:2.4-1.1ubuntu1","2:2.6-15ubuntu1","2:2.6-15ubuntu2","2:2.6-15ubuntu2.1","2:2.6-15ubuntu2.2","2:2.6-15ubuntu2.3","2:2.6-15ubuntu2.4","2:2.6-15ubuntu2.5","2:2.6-15ubuntu2.6","2:2.6-15ubuntu2.7","2:2.6-15ubuntu2.8","2:2.6-15ubuntu2.8+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.9-1ubuntu2","2:2.9-1ubuntu3","2:2.9-1ubuntu4","2:2.9-1ubuntu4.1","2:2.9-1ubuntu4.2","2:2.9-1ubuntu4.3","2:2.9-1ubuntu4.4","2:2.9-1ubuntu4.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.9.0-21build1","2:2.9.0-23","2:2.10-1","2:2.10-2","2:2.10-6","2:2.10-6ubuntu1","2:2.10-6ubuntu2","2:2.10-6ubuntu2.1","2:2.10-6ubuntu2.2","2:2.10-6ubuntu2.3","2:2.10-6ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.10-15","2:2.10-18","2:2.10-20","2:2.10-21","2:2.10-21build2","2:2.10-21build3","2:2.10-21build4","2:2.10-21ubuntu0.1","2:2.10-21ubuntu0.2","2:2.10-21ubuntu0.3","2:2.10-21ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.11-0ubuntu5","2:2.11-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.11-0ubuntu4","2:2.11-0ubuntu5"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-160000.5.1"}]}]}],"references":[{"url":"https://w1.fi/security/2026-2/missing-network-context-validation-for-pmksa-caching.txt","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78807","tags":["web"]},{"url":"https://github.com/advisories/GHSA-3gc7-g84m-84jc"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-78807","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624096-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1280914","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78807","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624132-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624144-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624278-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264492-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24912","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264494-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264587-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264588-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264590-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-78807","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-78807","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-78807","description":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c","status":"published","published":"2026-09-11T00:00:00Z","modified":"2026-09-11T20:11:10.449Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T13:34:48.658051Z"}],"euvd":[{"id":"EUVD-2026-76184","description":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c","status":"published","published":"2026-09-11T00:00:00Z","modified":"2026-09-11T20:11:10Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T17:28:22.225258Z"}],"ghsa":[{"id":"GHSA-3gc7-g84m-84jc","title":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper...","description":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c","status":"published","published":"2026-09-11T18:31:26Z","modified":"2026-09-11T21:32:24Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T15:11:45.662784Z"}],"nvd":[{"id":"CVE-2026-78807","description":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c","status":"published","published":"2026-09-11T18:16:58.12Z","modified":"2026-09-22T19:56:19.073Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:12:46.271848Z"}],"osv":[{"id":"DEBIAN-CVE-2026-78807","description":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c","status":"published","published":"2026-09-11T18:16:58.12Z","modified":"2026-10-24T05:01:23.93709581Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:46:03.502256Z"},{"id":"UBUNTU-CVE-2026-78807","description":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c","status":"published","published":"2026-09-11T18:16:00Z","modified":"2026-10-17T12:57:05.332693983Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T16:57:18.015985Z"},{"id":"AZL-103386","title":"CVE-2026-78807 affecting package wpa_supplicant 2.12-1","description":"An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c","status":"published","published":"2026-09-11T18:16:58Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:17.528763Z"},{"id":"openSUSE-SU-2026:22022-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security\n  bypasses (bsc#1280914).\n","status":"published","published":"2026-10-05T17:48:33Z","modified":"2026-10-07T17:23:11.431902337Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:24096-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security\n  bypasses (bsc#1280914).\n","status":"published","published":"2026-10-05T17:52:58Z","modified":"2026-10-10T17:23:20.733150126Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:24132-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issue:\n\n- CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914).\n- Fix incomplete RADIUS Message-Authenticator attribute validation in hostapd\n","status":"published","published":"2026-10-09T07:35:20Z","modified":"2026-10-15T17:23:12.566036278Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24144-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security\n  bypasses (bsc#1280914).\n","status":"published","published":"2026-10-05T17:52:58Z","modified":"2026-10-16T17:23:10.01591609Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:24278-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issue:\n\n- CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914).\n","status":"published","published":"2026-10-19T09:46:17Z","modified":"2026-10-27T17:23:09.929859334Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4492-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security\n  bypasses (bsc#1280914).\n","status":"published","published":"2026-10-05T13:22:34Z","modified":"2026-10-06T11:15:10.487165831Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4494-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914).\n- Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd\n","status":"published","published":"2026-10-05T13:22:57Z","modified":"2026-10-06T11:15:10.807583839Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4587-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issue:\n\n- CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).\n- Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd\n","status":"published","published":"2026-10-08T12:13:02Z","modified":"2026-10-08T19:15:03.733744061Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4588-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issue:\n\n- CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security\n  bypasses (bsc#1280914).\n","status":"published","published":"2026-10-08T12:13:37Z","modified":"2026-10-09T18:15:03.746896544Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4590-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issue:\n\n- CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security\n  bypasses (bsc#1280914).\n","status":"published","published":"2026-10-08T12:16:22Z","modified":"2026-10-09T18:15:04.422169214Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}