API Error Handling Vulnerability in HPE Aruba Networking 5G Core Server
CVE-2026-23598

6.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
HP Aruba Networking Private 5g Core
Vendor
CVE Published:
17 February 2026

What is CVE-2026-23598?

The HPE Aruba Networking 5G Core server contains an API error handling vulnerability that can be exploited by unauthenticated remote attackers. This flaw allows attackers to retrieve sensitive information, including user account details, roles, and system configurations. The information gained could lead to unauthorized access and elevated privileges, especially when combined with other security weaknesses. Organizations using this product must ensure they evaluate their security posture to mitigate potential risks associated with this vulnerability.

Affected Version(s)

HPE Aruba Networking Private 5G Core 1.24.3.0 <= 1.24.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Communication Security Establishments (CSE)
.