CVE-2026-78807

A vulnerability in wpa_supplicant prior to version 2.12 allows local attackers to exploit inadequate validation in the driver-based PMKSA selection process, enabling them to bypass network context and AKMP matching for PMKSA caching. This could lead to unauthorized access to secured networks, compromising the confidentiality and integrity of network communications. Organizations using affected versions of wpa_supplicant should prioritize patching to mitigate potential security risks.