CVE-2026-95786
Received
Received - Intake
Authorization Bypass in HPE System Interface
Vulnerability report for CVE-2026-95786, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-10
Last updated on: 2026-11-10
Assigner: Hewlett Packard Enterprise (HPE)
Description
Description
A vulnerability exists in a system interface that may, under certain conditions, fail to properly enforce authorization boundaries. Successful exploitation could allow an unauthorized party to access or modify protected system information, potentially affecting confidentiality and integrity.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | Private 5G Core (P5G Core) | From 0.0.0.0 (inc) to 1.26.1.4 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |