Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-23596

Unauthenticated Improper Access Control in management API allows unauthorized service disruption

Description

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) HPE Aruba Networking Private 5G Core

Default version status: affected

  • 1.24.3.0 to ≤ 1.24.3.4affected

References