← Vulnerability feed

Vulnerability record · CVE-2026-23596 · published 17 February 2026

CVE-2026-23596: Hpe aruba networking private 5g core uncontrolled resource consumption vulnerability

Hpe · Aruba Networking Private 5g Core

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.

6.5 CVSS 3.1 Medium EPSS 0.25% · top 84.9% CWE-400 · Uncontrolled resource consumption
6.5CVSS 3.1 base score
0.25%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05002en_us&docLocale=en_US PatchVendor Advisory

Track CVE-2026-23596 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.6CVE-2026-23818Hpe aruba networking private 5g core open redirect vulnerabilityA vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacke…EPSS 0.32%8.8CVE-2026-23595Hpe aruba networking private 5g core improper access control vulnerabilityAn authentication bypass in the application API allows an unauthorized administrative account to be created. A remote attacker could exploit this vul…EPSS 0.31%6.5CVE-2026-23597Hpe aruba networking private 5g core information exposure vulnerabilityVulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sens…EPSS 0.26%6.5CVE-2026-23598Hpe aruba networking private 5g core error message information leak vulnerabilityVulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an unauthenticated remote attacker to obtain sens…EPSS 0.34%7.5CVE-2026-28318SolarWinds Serv-U unauthenticated POST request denial of serviceSolarWinds Serv-U crashes when it receives a specially crafted POST request using Content-Encoding: deflate, and the crash occurs without authenticat…KEVEPSS 1.9%analysed7.5CVE-2026-45498Microsoft Defender antimalware platform uncontrolled resource consumption DoSCVE-2026-45498 is a denial of service flaw in the Microsoft Defender antimalware platform, classified as uncontrolled resource consumption (CWE-400).…KEVEPSS 1.3%analysed7.5CVE-2023-44487HTTP/2 Rapid Reset stream cancellation denial of serviceThe HTTP/2 protocol permits a client to cancel many streams quickly, and the server's handling of those resets consumes disproportionate resources. T…KEVEPSS 100%analysed7.5CVE-2023-38180Microsoft .NET and Visual Studio uncontrolled resource consumption DoSCVE-2023-38180 is a denial-of-service flaw in Microsoft .NET, ASP.NET Core and Visual Studio 2022, classified as uncontrolled resource consumption (C…KEVEPSS 14%analysed

Source: NIST National Vulnerability Database (record CVE-2026-23596), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.