W1.fi vulnerabilities
We track 4 vulnerabilities in W1.fi products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 30, 2026.
Latest W1.fi vulnerabilities
- 7.1 High severity
hostapd: Off-by-one Error
In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi
- 7.8 High severity
wpa_supplicant: Uncontrolled Search Path Element
An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or a
- 9.8 Critical severity
SIDIS Secured SmartPlug: Observable Discrepancy
The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.
- 9.8 Critical severity
SIDIS Secured SmartPlug: Observable Discrepancy
The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.