Read the docs
TI-2019-03522 Aliases CVE-2019-5061GHSA-6626-64rf-2cvv

Improper authentication in W1.f1

Priority LOW 31CWE-440Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.

Summary

An exploitable denial-of-service vulnerability exists in the hostapd 2.6, where an attacker could trigger AP to send IAPP location updates for stations, before the required authentication process has completed. This could lead to different denial of service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby Aps of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.

Why it matters now

EPSS 0.00917 60th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—W1.f1hostapd version 2.6 Ubiquiti AP-AC-Pro firmware 4.0.10.9653—No fix listedCNA
  • W1.f1 Vendor— Affected hostapd version 2.6 Ubiquiti AP-AC-Pro firmware 4.0.10.9653 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:*2.6VulnerableWi-Fi Alliance
  • cpe:2.3:a:w1.fi:hostapd:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Wi-Fi Alliance

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-5061
  2. 2026-10-03 Alias added: GHSA-6626-64rf-2cvv

References

Advisory 1

  • TI-2020-10094 The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the… CVSS 3.1HIGH 7.5
  • TI-2022-07426 The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are… CVSS 3.1CRITICAL 9.8
  • TI-2022-07427 The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are… CVSS 3.1CRITICAL 9.8
  • TI-2019-06933 Improper authentication in Wi-Fi Alliance hostapd with EAP-pwd support CVSS 3.0HIGH 8.1
  • TI-2017-09721 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of… CVSS 3.0HIGH 8.1
  • TI-2019-06935 Origin validation error in Wi-Fi Alliance hostapd with EAP-pwd support CVSS 3.1HIGH 8.1
See all 40 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences