8.8
Élevée
CVE-2026-23595 An authentication bypass in the application API allows an unauthorized administrative account to be created
Description
An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HPE Aruba Networking Private 5G Core 1.24 | 1.24.3.0 → 1.24.3.4 | Pas de correctif indiqué |
Autres CVE de HPE Aruba Networking Private 5G Core
Les 5 CVE de HPE Aruba Networking Private 5G Core →
CVE-2026-23598
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an…
6.5
Moyenne
CVE-2026-23597
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an…
6.5
Moyenne
CVE-2026-23596
A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to…
6.5
Moyenne
CVE-2025-37100
A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to…
7.7
Élevée