CVE-2020-26146

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design.

• CWE-20
• CWE-20

• http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
• https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
• https://www.fragattacks.comThird Party Advisory
• http://www.openwall.com/lists/oss-security/2021/05/11/12Mailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdfThird Party Advisory
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.mdThird Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWuThird Party Advisory
• https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63Third Party Advisory
• https://www.fragattacks.comThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-019200.html
• https://cert-portal.siemens.com/productcert/html/ssa-913875.html

Published

May 11, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26140An issue was discovered in the ALFA Windows 10 driver 6.1316…6.5
• CVE-2020-26141An issue was discovered in the ALFA Windows 10 driver 6.1316…6.5
• CVE-2020-26142An issue was discovered in the kernel in OpenBSD 6.6. The WE…5.3
• CVE-2020-26143An issue was discovered in the ALFA Windows 10 driver 1030.3…6.5
• CVE-2020-26144An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 dev…6.5
• CVE-2020-26145An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 dev…6.5
• CVE-2020-26147An issue was discovered in the Linux kernel 5.8.9. The WEP, …5.4
• CVE-2020-26148md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers…7.5
• CVE-2020-26149NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and…7.5
• CVE-2020-2615Vulnerability in the Enterprise Manager Base Platform produc…6
• CVE-2020-26150info.php in Logaritmo Aware CallManager 2012 allows remote a…7.5
• CVE-2020-26153A cross-site scripting (XSS) vulnerability in wp-content/plu…6.1