CVE-2026-77191CWE-862broken-access-control
CVE-2026-77191
Low · published September 15, 2026
What it is
An authenticated supplicant on an adjacent network may bypass intended network authorization policy and send unrestricted traffic during a brief window (milliseconds to seconds) between the completion of the authentication phase and the full enforcement of its assigned ACL.
The record
Technical detail
- CVSS v3.1
- 2.6 · LOW
- Vector
- CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS v4.0
- 2.1 · CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00224 · 12.3th percentile
- Weakness
- CWE-862 · Missing Authorization
- Published
- 2026-09-15T03:18Z
References (1)
EPSS history
Timeline