CVE-2026-23596 — Unauthenticated Improper Access Control in management API allows unauthorized service disruption

CVE-2026-23596

Unauthenticated Improper Access Control in management API allows unauthorized service disruption PUBLISHED

Description (CNA)

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Aruba Networking Private 5G Core	affected 1.24.3.0 through 1.24.3.4

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05002en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.