CVE-2020-26141 Security feature bypass in n/a

Medium 6.5 Published 11 May 2021 Updated 14 Apr 2026

Attackers can bypass TKIP integrity checks to inject or decrypt packets on WPA/WPA2 networks using vulnerable ALFA Wi-Fi drivers.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2020-26141?

CVE-2020-26141 is a medium-severity vulnerability in n/a, published on 11 May 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check (authenticity) of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the TKIP data-confidentiality protocol.

Weakness: CWE-354

Which versions are affected by CVE-2020-26141?

It affects 95 products.

Products include Alfa Awus036h Firmware, Cisco Ip Conference Phone 8832 Firmware, Cisco Ip Phone 6861 Firmware, Cisco Ip Phone 8861 Firmware, Cisco Ip Phone 8865 Firmware, Cisco Meraki Gr10 Firmware and 89 more.

How do I fix CVE-2020-26141?

Apply the vendor's patch.

Is CVE-2020-26141 being exploited?

There is no known exploitation of CVE-2020-26141 in the wild and no public exploit code.

Sources

Also known as 2869483, A-177911676, ASB-A-177911676, DEBIAN-CVE-2020-26141, GHSA-mq8v-785f-4pmx, UBUNTU-CVE-2020-26141.