PT-2026-20308 · Hewlett Packardaruba Networking · Hpe Aruba Networking 5G Core

Published 2026-02-17 · Updated 2026-03-02 · CVE-2026-23597

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking 5G Core versions (affected versions not specified)

Description An issue exists in the API error handling of an HPE Aruba Networking 5G Core server API that could allow an unauthenticated remote attacker to obtain sensitive information. Exploitation could allow access to details such as user accounts, roles, and system configuration, as well as insight into internal services and workflows. This could increase the risk of unauthorized access and elevated privileges when combined with other issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-23597

Affected Products

Hpe Aruba Networking 5G Core

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-23597 · Security Note
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05002en_us&docLocale=en_US · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23597 · Vendor Advisory
• https://t.me/cveNotify/153722 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2023933777223750136 · Twitter Post
• https://t.me/cveNotify/153627 · Telegram Post
• https://twitter.com/CVEnew/status/2023901974161145940 · Twitter Post
• https://t.me/CVEtracker/44909 · Telegram Post
• https://t.me/cveNotify/152338 · Telegram Post