API Error Handling Vulnerability in HPE Aruba Networking 5G Core Server
CVE-2026-23597

6.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
HP Aruba Networking Private 5g Core
Vendor
CVE Published:
17 February 2026

What is CVE-2026-23597?

Vulnerabilities in the API error handling of HPE Aruba Networking's 5G Core server could enable an unauthenticated remote attacker to extract sensitive information. Exploitation of this vulnerability may allow access to critical data including user accounts, roles, and the overall system configuration. Additionally, it presents an opportunity for insight into internal services and workflows, which increases the likelihood of unauthorized access and may escalate privileges, particularly when correlated with other security flaws.

Affected Version(s)

HPE Aruba Networking Private 5G Core 1.24.3.0 <= 1.24.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Communication Security Establishments (CSE)
.