CVEvulnerability
CVE-2026-23595
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-02-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-284
Description
An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.
Affected configurations
• hpe aruba networking private 5g core (>= 1.24.3.0 <= 1.24.3.3)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05002en_us&docLocale=en_US Patch, Vendor Advisory