Open Redirect Vulnerability in HPE Aruba Networking Private 5G Core On-Prem

CVE-2026-23818

What is CVE-2026-23818?

A security flaw has been discovered in the graphical user interface (GUI) of the HPE Aruba Networking Private 5G Core On-Prem. This vulnerability allows an attacker to exploit an open redirect in the login flow through a specially crafted URL. By successfully leveraging this issue, an attacker could redirect authenticated users to a malicious server that mimics the legitimate login interface, prompting them to enter sensitive credentials. These credentials may then be harvested by the attacker, who can subsequently redirect the user back to the authentic login page, making the attack notably deceptive and harmful.

References