6.5
Medium
CVE-2026-23597 Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an…
Description
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well as to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking Private 5G Core 1.24 | 1.24.3.0 → 1.24.3.4 | No fix stated |
Other CVEs of HPE Aruba Networking Private 5G Core
The 5 CVEs of HPE Aruba Networking Private 5G Core →
CVE-2026-23598
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an…
6.5
Medium
CVE-2026-23596
A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to…
6.5
Medium
CVE-2026-23595
An authentication bypass in the application API allows an unauthorized administrative account to be created
8.8
High
CVE-2025-37100
A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to…
7.7
High