8.8
High
CVE-2026-23595 An authentication bypass in the application API allows an unauthorized administrative account to be created
Description
An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking Private 5G Core 1.24 | 1.24.3.0 → 1.24.3.4 | No fix stated |
Other CVEs of HPE Aruba Networking Private 5G Core
The 5 CVEs of HPE Aruba Networking Private 5G Core →
CVE-2026-23598
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an…
6.5
Medium
CVE-2026-23597
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an…
6.5
Medium
CVE-2026-23596
A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to…
6.5
Medium
CVE-2025-37100
A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to…
7.7
High