CVE-2026-23598
Unauthenticated Information Disclosure in application API allows sensitive system information exposure
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to access details such as user accounts, roles, and system configuration, as well as to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.
| Vendor | hewlett packard enterprise (hpe) |
| Product | hpe aruba networking private 5g core |
| Published | Feb 17, 2026 |
| Last Updated | Feb 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for hewlett packard enterprise (hpe) hpe aruba networking private 5g core
Be the first to know when new medium vulnerabilities affecting hewlett packard enterprise (hpe) hpe aruba networking private 5g core are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Hewlett Packard Enterprise (HPE) / HPE Aruba Networking Private 5G Core
1.24.3.0 ≤ 1.24.3.4
References
Credits
🔍 Communication Security Establishments (CSE)