Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-23596 EUVD-2026-8090GHSA-8rh3-rvv2-3mr4

Unauthenticated Improper Access Control in management API allows unauthorized service disruption

Published Feb 17, 2026 · Updated Feb 18, 2026 · Assigned by hpe

Description

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Private 5G Core 1.24.3.0 – ≤ 1.24.3.4 —

References