Multiple critical vulnerabilities in HPE Aruba Networking Private 5G Core allow data confidentiality, integrity breaches, and security bypass
Multiple vulnerabilities have been identified in HPE Aruba Networking Private 5G Core versions prior to 1.26.2.0. These flaws enable attackers to compromise data confidentiality and integrity, as well as bypass security policies. The detailed management of versions and patch information is available in the official security bulletin HPESBNW05179 dated November 10, 2026. The advisory lists several CVEs including CVE-2026-33228, CVE-2026-49759, and a series from CVE-2026-95780 to CVE-2026-95786. Organizations using Private 5G Core should promptly apply the vendor's fixes to mitigate these critical risks.
Entenda a falha
A vulnerabilidade
Nine CVEs (CVE-2026-33228, CVE-2026-49759 and CVE-2026-95780 through CVE-2026-95786) affect HPE Aruba Networking Private 5G Core versions before 1.26.2.0. According to the CERT-FR advisory and HPE bulletin HPESBNW05179 (10 November 2026), some of them let an attacker breach data confidentiality, breach data integrity and bypass the security policy. The articles do not give per-CVE details, the affected component, severity scores or what an attacker needs (network access, authentication, configuration). Defenders should consult the HPE bulletin for the fixed release, which appears to be 1.26.2.0 or later.
Como foi descoberta
The articles do not say who found the flaws or how. HPE published the security bulletin HPESBNW05179 on 10 November 2026, and CERT-FR republished a summary advisory (CERTFR-2026-AVI-1503) on 12 November 2026, pointing readers to the vendor bulletin for fixes.
Explicação gerada por IA a partir da matéria e dos artigos, em 12/11/2026 13:30.
Linha do tempo
-
Multiple critical vulnerabilities in HPE Aruba Networking Private 5G Core allow data confidentiality, integrity breaches, and security bypass
ler a análise desta fonte ocultar
Multiple vulnerabilities have been identified in HPE Aruba Networking Private 5G Core versions prior to 1.26.2.0. These flaws enable attackers to compromise data confidentiality and integrity, as well as bypass security policies. The detailed management of versions and patch information is available in the official security bulletin HPESBNW05179 dated November 10, 2026. The advisory lists several CVEs including CVE-2026-33228, CVE-2026-49759, and a series from CVE-2026-95780 to CVE-2026-95786. Organizations using Private 5G Core should promptly apply the vendor's fixes to mitigate these critical risks.