CVE-2026-23596 MEDIUM

CVE-2026-23596: Unauthenticated Improper Access Control in management API allows unauthorized service disruption

Vendor Hewlett Packard Enterprise (Hpe)
Product HPE Aruba Networking Private 5G Core
Published February 17, 2026
Last update February 18, 2026
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.

Key dates

02Disclosure timeline

February 17, 2026 CVE published
February 18, 2026 Record updated