HPE Aruba Networking Private 5g Core vulnerabilities

5 CVEs affecting HPE Aruba Networking Private 5g Core, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-23818, published 2026-04-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-23598, published 2026-02-17. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could…
CVE-2026-23595, published 2026-02-17. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts.…
CVE-2026-23818, published 2026-04-07. Critical severity, CVSS 9.6. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the…
CVE-2026-23597, published 2026-02-17. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could…
CVE-2026-23596, published 2026-02-17. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt…