CVE-2026-95780
Authentication and Session Management Vulnerability Could Permit Continued Unauthorized Access
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability exists in the authentication and session-management mechanisms that may result in access not being fully terminated following certain account or session state changes. Under specific conditions, a remote user with prior legitimate access could retain access to protected system resources beyond the intended authorization period. Successful exploitation could result in continued unauthorized access.
| Vendor | hewlett packard enterprise (hpe) |
| Product | private 5g core (p5g core) |
| Published | Nov 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for hewlett packard enterprise (hpe) private 5g core (p5g core)
Be the first to know when new high vulnerabilities affecting hewlett packard enterprise (hpe) private 5g core (p5g core) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
Hewlett Packard Enterprise (HPE) / Private 5G Core (P5G Core)
0.0.0.0 ≤ 1.26.1.4
References
Credits
🔍 Internal security research (HPE Networking).