{"id":"CVE-2026-95781","kind":"vulnerability","aliases":["CVE-2026-95781"],"related":[],"title":"AthonetOS: unauthorized party may disrupt service or reach protected functions","description":"A security vulnerability exists in AthonetOS that may allow an unauthorized party to affect service operation or gain access to certain protected system functions. Successful exploitation could result in a compromise of service integrity or unauthorized system access.","summary":"AthonetOS has a security vulnerability that may let an unauthorized party affect service operation or gain access to protected system functions. The description says successful exploitation could compromise service integrity or give unauthorized system access.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"AthonetOS","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["athonetos","infrastructure","private-5g","telecom"],"not_affected_if":[],"how_to_check":"unknown: no vendor advisory read yet. Check HPE Networking security bulletins (networkingsupport.hpe.com/notifications) for AthonetOS / Private 5G Core and compare your installed AthonetOS version.","fix":null,"status":"open","published_at":"2026-11-10T20:19:48+00:00","first_seen_at":"2026-11-10T20:46:17+00:00","triaged_at":"2026-11-10T20:47:46+00:00","updated_at":"2026-11-10T20:53:13+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-11-10T20:47:46Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"AthonetOS: unauthorized party may disrupt service or reach protected functions","impact":"high","summary":"AthonetOS has a security vulnerability that may let an unauthorized party affect service operation or gain access to protected system functions. The description says successful exploitation could compromise service integrity or give unauthorized system access.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["athonetos"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker disrupts service or reaches protected system functions","analyst_note":"Find the affected AthonetOS versions, the vendor advisory and any fixed release, and what access the attacker needs, via https://nvd.nist.gov/vuln/detail/CVE-2026-95781.","how_to_check":"unknown","plain_action":"","product_name":"AthonetOS","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000656,"input_tokens":4524,"output_tokens":407,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected AthonetOS versions, the vendor advisory and any fixed release, and what access the attacker needs, via https://nvd.nist.gov/vuln/detail/CVE-2026-95781.","search":"'-2026':12A,15A '-95781':13A,16A '5g':22B 'access':40B,58B,77C,96C 'affect':35B,72C 'allow':67C 'athoneto':1A,18B,24B,64C 'athonetos':17A 'certain':79C 'compromis':51B,89C 'could':50B,85C 'cve':11A,14A 'descript':46B 'disrupt':5A 'exist':62C 'exploit':49B,84C 'function':10A,44B,82C 'gain':39B,76C 'give':55B 'infrastructur':19B 'integr':53B,92C 'let':31B 'may':4A,30B,66C 'oper':37B,74C 'parti':3A,34B,70C 'privat':21B 'private-5g':20B 'protect':9A,42B,80C 'reach':8A 'result':86C 'say':47B 'secur':27B,60C 'servic':6A,36B,52B,73C,91C 'success':48B,83C 'system':43B,57B,81C,95C 'telecom':23B 'unauthor':2A,33B,56B,69C,94C 'vulner':28B,61C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["athonetos"],"ptokens":["athonetos"],"labels":["athonetos","high","infrastructure","private5g","telecom","vendor"],"campaign_type":null,"search_a":"'-2026':12A,15A '-95781':13A,16A 'athoneto':1A 'athonetos':17A 'cve':11A,14A 'disrupt':5A 'function':10A 'may':4A 'parti':3A 'protect':9A 'reach':8A 'servic':6A 'unauthor':2A","search_b":"'5g':22B 'access':40B,58B 'affect':35B 'athoneto':18B,24B 'compromis':51B 'could':50B 'descript':46B 'exploit':49B 'function':44B 'gain':39B 'give':55B 'infrastructur':19B 'integr':53B 'let':31B 'may':30B 'oper':37B 'parti':34B 'privat':21B 'private-5g':20B 'protect':42B 'say':47B 'secur':27B 'servic':36B,52B 'success':48B 'system':43B,57B 'telecom':23B 'unauthor':33B,56B 'vulner':28B","search_c":"'access':77C,96C 'affect':72C 'allow':67C 'athoneto':64C 'certain':79C 'compromis':89C 'could':85C 'exist':62C 'exploit':84C 'function':82C 'gain':76C 'integr':92C 'may':66C 'oper':74C 'parti':70C 'protect':80C 'result':86C 'secur':60C 'servic':73C,91C 'success':83C 'system':81C,95C 'unauthor':69C,94C 'vulner':61C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95781","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95781","severity":null,"published_at":"2026-11-10T20:19:48+00:00","modified_at":"2026-11-10T20:19:48+00:00","first_seen_at":"2026-11-10T20:46:17+00:00","fetched_at":"2026-11-10T20:46:17+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95781:2720","url":null,"severity":null,"published_at":"2026-11-10T20:53:13+00:00","modified_at":"2026-11-10T20:53:13+00:00","first_seen_at":"2026-11-10T20:53:13+00:00","fetched_at":"2026-11-10T20:53:13+00:00","note":"No primary advisory found: NVD page fetch returned empty; HPE CNA (security-alert@hpe.com) is the assigner, likely tied to HPE Networking Private 5G advisory notice of 2026-11-10 (HPESBNW05178) but unconfirmed; csaf URL guess failed. CVSS vector in record is AV:N/PR:N/C:H (confidentiality only), which does not match the description's integrity/service wording. No affected/fixed versions, no PoC, no exploitation evidence. Settle by reading HPESBNW05178 on networkingsupport.hpe.com/notifications."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}