What’s Vulnerable › Vulnerabilities
CVE-2026-23596: Unauthenticated Improper Access Control in management API allows unauthorized service disruption
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-02-17 · updated 2026-06-17
- Weakness: CWE-400
Description
A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.
Affected products
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking Private 5G Core: from 1.24.3.0 through 1.24.3.3
References
Get alerted when CVE-2026-23596 or the next vulnerability affects your stack