CVE-2026-23596: Unauthenticated Improper Access Control in management API allows unauthorized service disruption

Q: What is the severity of CVE-2026-23596?

CVE-2026-23596 is considered a high severity vulnerability due to its potential for unauthorized service disruption.

Q: How do I fix CVE-2026-23596?

To fix CVE-2026-23596, it is recommended to apply the latest security patches provided by HPE for Aruba Networking Private 5G Core.

Q: Who is affected by CVE-2026-23596?

CVE-2026-23596 affects users of HPE Aruba Networking Private 5G Core versions between 1.24.3.0 and 1.24.3.3.

Q: What can an attacker do with CVE-2026-23596?

An attacker exploiting CVE-2026-23596 can trigger service restarts, leading to potential service disruptions.

Q: Is authentication required to exploit CVE-2026-23596?

No, CVE-2026-23596 can be exploited by an unauthenticated remote attacker.

Published Feb 17, 2026

Updated

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.

Affected Software

1 affected component

HPE Aruba Networking Private 5G Core>=1.24.3.0<=1.24.3.3

Remediation

Patch Available

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05002en_us&docLocale=en_US

Event History

Feb 17, 2026

CVE Published

via MITRE·08:46 PM

Data Sourced

via MITRE·08:46 PM

DescriptionSeverity

Data Sourced

via NVD·09:22 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-23596?

CVE-2026-23596 is considered a high severity vulnerability due to its potential for unauthorized service disruption.

How do I fix CVE-2026-23596?

To fix CVE-2026-23596, it is recommended to apply the latest security patches provided by HPE for Aruba Networking Private 5G Core.

Who is affected by CVE-2026-23596?