What’s Vulnerable › Products

w1.fi hostapd vulnerabilities

41 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your w1.fi hostapd version is affected

Latest w1.fi hostapd vulnerabilities

• CVE-2026-58374 — (CVSS 7.1)
• CVE-2025-24912 — (CVSS 3.7)
• CVE-2022-37660 — (CVSS 6.5)
• CVE-2022-23304 — (CVSS 9.8)
• CVE-2022-23303 — (CVSS 9.8)
• CVE-2021-30004 — (CVSS 5.3)
• CVE-2020-12695 — (CVSS 7.5)
• CVE-2019-10064 — (CVSS 7.5)
• CVE-2019-5062 — (CVSS 6.5)
• CVE-2019-5061 — (CVSS 6.5)
• CVE-2019-16275 — (CVSS 6.5)
• CVE-2019-13377 — (CVSS 5.9)
• CVE-2019-11555 — (CVSS 5.9)
• CVE-2019-9499 — The implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit (CVSS 8.1)
• CVE-2019-9498 — The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit (CVSS 8.1)
• CVE-2019-9497 — The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit (CVSS 8.1)
• CVE-2019-9496 — An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps (CVSS 7.5)
• CVE-2019-9495 — The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns (CVSS 3.7)
• CVE-2019-9494 — The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks (CVSS 5.9)
• CVE-2016-10743 — (CVSS 7.5)
• CVE-2017-13088 — (CVSS 5.3)
• CVE-2017-13087 — (CVSS 5.3)
• CVE-2017-13086 — (CVSS 6.8)
• CVE-2017-13084 — (CVSS 6.8)
• CVE-2017-13082 — (CVSS 8.1)