VulnSocial

CVE-2026-23597Disclosure(hpe / aruba_networking_private_5g_core)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch hpe aruba_networking_private_5g_core systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well as to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.

hpe CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • aruba_networking_private_5g_core

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-02-17); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
hpe
Products
aruba_networking_private_5g_core

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-02-17: 1Mentions · 2026-02-18: 1Mentions · 2026-02-20: 1Patch / Workaround · 2026-02-20: 1Technical Details · 2026-02-17: 1Technical Details · 2026-02-20: 102-1702-1802-20
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-02-171
Disclosure1
2026-02-181
Disclosure1
2026-02-201
Patch1
Full discourse3 posts
  • iototsecnews@iototsecnews
    Patch

    Aruba の脆弱性 CVE-2026-23595 などが FIX：権限昇格や DoS 攻撃の恐れ https://iototsecnews.jp/2026/02/12/hpe-aruba-flaw-exposes-networking-devices-to-privilege-escalation-and-dos-attacks/ 企業や工場のプライベート 5G ネットワークを支える HPE Aruba Networking Private 5G Core に、管理者権限の奪取などを引き起こす複数の脆弱性が発見されました。最も深刻な脆弱性 CVE-2026-23595 は、アプリケーション API における認証プロセスの不備に起因します。通常、新しい管理者アカウントを作成するには厳格な本人確認が必要ですが、この脆弱性を悪用する外部の攻撃者は、正規の手続きを飛び越えて特権アカウントを作成できてしまう状態になっています。この他にも、サービスの強制再起動による業務停止 CVE-2026-23596 や、エラー画面からシステム構成が漏洩する問題 CVE-2026-23597 なども修正されました。ご利用のチームは、ご注意ください。 #Aruba #CVE20262317 #CVE20262318 #CVE20262319 #CVE20262320 #CVE20262321 #CVE20262322 #CVE20262323 #CVE202623595 #CVE202623596 #CVE202623597 #CVE202623598 #HPE #Private5GCorePlatform #Vulnerability

    Post summary

    The article announces that HPE Aruba Private 5G Core had several critical vulnerabilities (e.g., CVE‑2026‑23595) enabling privilege escalation and denial‑of‑service, and states that these issues have been fixed.

    01000129
    484 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-23597 Information Disclosure Vulnerability in HPE Aruba Networking 5G Core Server API https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23597

    Post summary

    The text lists CVE-2026-23597 as an information disclosure vulnerability in HPE Aruba 5G Core Server API, providing only a link to a detail page without additional technical, exploit, or patch information.

    0001050
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-23597 Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive informatio… https://www.cve.org/CVERecord?id=CVE-2026-23597

    Post summary

    The post announces CVE‑2026‑23597, an information‑disclosure flaw in HPE Aruba Networking 5G Core server API error handling, without providing PoC, exploit, patch, or active exploitation details.

    00010148
    56.4K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apphpearuba_networking_private_5g_core---

Explore more

Back to dashboardhpe CVEsaruba_networking_private_5g_core vulnerabilities