CVE-2026-23596 Unauthenticated Improper Access Control in management API allows unauthorized service disruption

Medium 6.5 Published 17 Feb 2026 Updated 18 Feb 2026

Unauthenticated attackers can trigger service restarts in HPE Aruba Private 5G Core, causing denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-23596?

CVE-2026-23596 is a medium-severity missing authorization vulnerability in Hewlett Packard Enterprise (HPE) HPE Aruba Networking Private 5G Core, published on 17 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.

Weakness: CWE-400

Which versions are affected by CVE-2026-23596?

It affects 1 product.

Products include Hpe Aruba Networking Private 5g Core.

How do I fix CVE-2026-23596?

No fix has been published for CVE-2026-23596 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2026-23596 being exploited?

There is no known exploitation of CVE-2026-23596 in the wild and no public exploit code.

Sources

Also known as GHSA-8rh3-rvv2-3mr4.