« Volver al listado

HPE

HPE Aruba Networking Private 5G Core: vulnerabilidades y CVE

HPE Aruba Networking Private 5G Core tiene 6 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE6
Últimos 12 meses5
Críticas1
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-23818Crítica (9.6)0.32%—7 abr 2026
A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the login flow using a…
CVE-2026-23598Media (6.5)0.32%—17 feb 2026
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to…
CVE-2026-23597Media (6.5)0.24%—17 feb 2026
Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could allow an attacker to…
CVE-2026-23596Media (6.5)0.24%—17 feb 2026
A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and…
CVE-2026-23595Alta (8.8)0.30%—17 feb 2026
An authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vulnerability to create privileged user accounts. Successful exploitation…
CVE-2025-37100Alta (7.7)0.48%—10 jun 2025
A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through…

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1210 Exploitation of Remote Services2
  2. T1005 Data from Local System1
  3. T1098.002 Additional Email Delegate Permissions1
  4. T1203 Exploitation for Client Execution1
  5. T1212 Exploitation for Credential Access1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de HPE