Vulnerability Description
An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hpe | Aruba Networking Private 5G Core | >= 1.24.3.0, <= 1.24.3.3 |
Related Weaknesses (CWE)
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05002en_us&docLocalPatchVendor Advisory
FAQ
What is CVE-2026-23595?
CVE-2026-23595 is a vulnerability with a CVSS score of 8.8 (HIGH). An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Succ...
How severe is CVE-2026-23595?
CVE-2026-23595 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-23595?
Check the references section above for vendor advisories and patch information. Affected products include: Hpe Aruba Networking Private 5G Core.