GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext during routine operations to the serial console. This issue allows physically-proximate attackers to obtain sensitive information, including network credentials, via monitoring the serial UART interface.
CVE-2026-46307 is a vulnerability in the ath5k wireless driver related to out-of-bounds array access. The affected product is Microsoft software version 3.0. No CVSS score or detailed technical impact information is provided. There is no indication of known exploitation in the wild or available patches at this time.
A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument KeyStr results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Uncontrolled resource consumption in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with write access to the in-vehicle network to permanently immobilize the motorcycle. The WCM enforces a brute-force lockout on the immobilizer authentication algorithm, but the lockout counter is reachable by any unauthenticated message, has no session binding, and does not reset on power cycle. An attacker can deliberately trip the lockout with a small number of crafted frames, leaving the bike un-startable until dealer service. Specific thresholds have been withheld pending vendor remediation.
Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read access to the in-vehicle network to recover the per-vehicle ECM immobilizer secret by passively observing a single seed/key exchange. The WCM derives its response using a reversible, non-cryptographic operation rather than a cryptographic challenge-response, so the persistent immobilizer secret can be reconstructed from one captured exchange. With this secret the attacker can authenticate to the ECM independently of the WCM and start the engine, defeating the immobilizer. Specific protocol details have been withheld pending vendor remediation.
Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read access to the in-vehicle network to recover the user-set unlock PIN by passively observing a single PIN authentication exchange. The Infotainment Digital Round display computes its response using a non-cryptographic operation rather than a cryptographic challenge-response, so the PIN is mathematically derivable from one captured exchange, defeating the motorcycle's primary user-authentication control. Specific protocol details have been withheld pending vendor remediation.
Frieren is an open-source framework designed to transform OpenWrt routers and single-board computers into portable wireless security appliances similar in concept to WiFi Pineapple devices. It provides a web-based control panel, WiFi management, installable third-party modules, an integrated terminal, and system diagnostics. The project is intended for authorized security testing, research, and defensive workflows. There is no indication of a specific vulnerability or exploit associated with Frieren itself. It is a security tool/framework rather than a security threat or vulnerability. No patch or remediation is applicable.
WiFi-SpiderWeb is an open-source active cyber defense and honeypot system designed for OpenWrt routers. It detects Wi-Fi deauthentication and disassociation attacks by monitoring wireless traffic and triggers active countermeasures when an attack threshold is met. The system deploys virtual honeypots with fake SSIDs, blocks attacker MAC addresses at the kernel level, and floods attackers with junk packets to stall their scanning tools. It is intended for use on low-resource OpenWrt routers with USB storage and supports multiple wireless chipsets. The tool is designed for defensive security and requires explicit authorization for use. No known exploits in the wild or vendor patches are applicable as this is a defensive tool rather than a vulnerability.
NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.
Security Fix(es):
* networkmanagr: NetworkManager File Access (CVE-2025-9615)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.
ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication.
A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code as a privileged user on the underlying operating system, potentially leading to a system compromise. Exploitation may also result in a denial-of-service (DoS) condition affecting the impacted system process.
CVE-2026-46136 is a vulnerability in the mt76 wireless driver component, specifically the mt7921 chipset, involving a potential buffer length underflow in the clc buffer handling. The issue is identified in Microsoft product version 3.0. No CVSS score or detailed impact metrics are provided. There is no indication of known exploits in the wild or public exploit code. The vulnerability affects a specific software version and is not related to a cloud service.
This vulnerability involves the b43 wireless driver component, specifically enforcing bounds checking on the firmware key index in the b43_rx() function. It affects Microsoft software version 3.0. No CVSS score or detailed technical impact is provided. No known exploits are reported in the wild. The vulnerability was published on May 2, 2026.
A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137. The impacted element is the function setWiFiMultipleConfig in the library /lib/cste_modules/wireless.so of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument wepkey2 results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management interface, an attacker can exhaust system resources in the embedded Boa HTTP server. This causes the router web interface to become unresponsive and may require manual reboot to restore normal operation.
Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent URIs, an attacker can exhaust critical system resources, including file descriptors and memory buffers. This results in a kernel deadlock or system hang that disables the web management portal and all routing capabilities.
Unit 42 research has identified a critical vulnerability termed 'AirSnitch' that can bypass WPA2 and WPA3 Wi-Fi encryption and client isolation mechanisms. This vulnerability exposes enterprise wireless networks and critical infrastructure to potential unauthorized access despite standard Wi-Fi security measures. The attack undermines the foundational protections of Wi-Fi encryption protocols, posing a significant risk to enterprise environments relying on these technologies. No specific affected versions or patches have been disclosed yet. There is no evidence of active exploitation in the wild at this time.