CVE-2026-21367

CVE-2026-21367 is a denial-of-service vulnerability affecting wireless network devices during the initial scan process, specifically triggered by processing FILS Discovery Frames with invalid action sizes that cause transient service disruption. The vulnerability carries a CVSS score of 7.6 (HIGH) with a network-based attack vector, though exploitation requires high privilege levels and user interaction, limiting its practical threat surface. The potential impact is significant, affecting confidentiality, integrity, and availability of the affected system, though the transient nature suggests temporary rather than permanent compromise. No evidence of active exploitation exists, with an EPSS score of 0.00031 indicating minimal real-world exploitation activity and no current inclusion on vulnerability alert lists. The moderate FAUCET Risk Score of 48.0 suggests organizations should address this vulnerability in their patching cycles, though it does not represent an immediate critical threat requiring emergency response.