CVE-2026-23596
Unauthenticated Improper Access Control in management API allows unauthorized service disruption
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
17 feb 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Private 5G Core¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →