Skip to main content
CVE-2026-90346VulnerabilityPublished Updated

Microsoft · wifi: nl80211: clean up color-change beacon data on errors

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-90346· Low

Not known to be exploited · fixed in bbe3a69a7b64398dddd1c989e9a40eaa57616b33 : update Microsoft when convenient.

Data as of 7 Nov 2026, 13:35 UTC

Severity
Low

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in bbe3a69a7b64398dddd1c989e9a40eaa57616b33, 927ee844c47ac2aef22c8f7a35f098ff576b398b, 62f8c28a0fb08611e1278ab2af964550e22aac3c +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 17 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 7 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ dc1e3cb8da8b414b37208b2fb6755fef8122504b, < bbe3a69a7b64398dddd1c989e9a40eaa57616b33
Fixed in
  • bbe3a69a7b64398dddd1c989e9a40eaa57616b33
LinuxLinuxAffected
  • ≥ dc1e3cb8da8b414b37208b2fb6755fef8122504b, < 927ee844c47ac2aef22c8f7a35f098ff576b398b
Fixed in
  • 927ee844c47ac2aef22c8f7a35f098ff576b398b
LinuxLinuxAffected
  • ≥ dc1e3cb8da8b414b37208b2fb6755fef8122504b, < 62f8c28a0fb08611e1278ab2af964550e22aac3c
Fixed in
  • 62f8c28a0fb08611e1278ab2af964550e22aac3c
LinuxLinuxAffected
  • ≥ dc1e3cb8da8b414b37208b2fb6755fef8122504b, < 5f47c9bc4a62e61f932a83680a796bc09ae48dd3
Fixed in
  • 5f47c9bc4a62e61f932a83680a796bc09ae48dd3
LinuxLinuxAffected
  • ≥ dc1e3cb8da8b414b37208b2fb6755fef8122504b, < 4e0a67fbe3d9e2e1d6f81dfc607184c6b0abd3dd
Fixed in
  • 4e0a67fbe3d9e2e1d6f81dfc607184c6b0abd3dd
LinuxLinuxAffected
  • ≥ dc1e3cb8da8b414b37208b2fb6755fef8122504b, < 0ec1d14cf302ae7c23ec218527b2849a1fced3f4
Fixed in
  • 0ec1d14cf302ae7c23ec218527b2849a1fced3f4

Description

This vulnerability, identified as CVE-2026-90346, relates to the wifi nl80211 component and involves cleaning up color-change beacon data on errors. It affects Microsoft products versions 3.0 and 4.0. No detailed technical or impact information is provided beyond the existence of the vulnerability.

References

Community reviews

Loading reviews…