{"id":"CVE-2026-95782","kind":"vulnerability","aliases":["CVE-2026-95782"],"related":[],"title":"HPE Private 5G Core monitoring component flaw may expose information to unauthorized users","description":"A vulnerability exists in a monitoring component that may, under certain conditions, allow security controls to be circumvented. Successful exploitation could result in unauthorized access to information intended for authorized users only.","summary":"HPE lists a flaw in a monitoring component of Private 5G Core (CVSS 7.5) where security controls may be bypassed under certain conditions, exposing information meant for authorized users. Not marked exploited. Fixed version not confirmed from the vendor bulletin.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Private 5G Core","fixed":[],"affected":"unknown (feed maps all versions)","ecosystem":"vendor"}],"ecosystems":[],"tags":["hpe","monitoring","other","private-5g-core","self-hosted"],"not_affected_if":[],"how_to_check":"Check whether you run HPE Aruba Networking Private 5G Core and its version in My HPE Software Center or the deployment; then read HPE bulletin hpesbnw05179 for affected versions (unknown so far).","fix":null,"status":"open","published_at":"2026-11-10T20:19:49+00:00","first_seen_at":"2026-11-10T20:46:17+00:00","triaged_at":"2026-11-10T20:47:46+00:00","updated_at":"2026-11-10T20:53:33+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T20:47:46Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Monitoring component flaw may let attackers bypass security controls","impact":"medium","summary":"A flaw in an unnamed monitoring component may allow security controls to be circumvented under certain conditions. Successful exploitation could expose information meant only for authorized users.","audience":"businesses","category":"other","nicknames":[],"who_cares":["monitoring"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Unauthorized access to information intended only for authorized users","analyst_note":"Identify the affected monitoring product and versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-95782 and check the vendor advisory for the fix.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown. The sources do not name the monitoring product, its versions, or the conditions under which the controls can be bypassed.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000647,"input_tokens":4512,"output_tokens":392,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the affected monitoring product and versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-95782 and check the vendor advisory for the fix.","search":"'-2026':15A,18A '-95782':16A,19A '5g':3A,21A,28B,43B '7.5':46B 'access':97C 'allow':85C 'author':60B,102C 'bulletin':72B 'bypass':52B 'certain':54B,83C 'circumv':90C 'compon':6A,40B,79C 'condit':55B,84C 'confirm':68B 'control':49B,87C 'core':4A,22A,29B,44B 'could':93C 'cve':14A,17A 'cvss':45B 'exist':75C 'exploit':64B,92C 'expos':9A,56B 'fix':65B 'flaw':7A,36B 'host':32B 'hpe':1A,23B,33B 'inform':10A,57B,99C 'intend':100C 'list':34B 'mark':63B 'may':8A,50B,81C 'meant':58B 'monitor':5A,24B,39B,78C 'privat':2A,27B,42B 'private':20A 'private-5g-core':26B 'result':94C 'secur':48B,86C 'self':31B 'self-host':30B 'success':91C 'unauthor':12A,96C 'user':13A,61B,103C 'vendor':71B 'version':66B 'vulner':74C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["5gcore","private5gcore"],"ptokens":["5g","core","private"],"labels":["high","hpe","monitoring","other","private5gcore","selfhosted"],"campaign_type":null,"search_a":"'-2026':15A,18A '-95782':16A,19A '5g':3A,21A 'compon':6A 'core':4A,22A 'cve':14A,17A 'expos':9A 'flaw':7A 'hpe':1A 'inform':10A 'may':8A 'monitor':5A 'privat':2A 'private':20A 'unauthor':12A 'user':13A","search_b":"'5g':28B,43B '7.5':46B 'author':60B 'bulletin':72B 'bypass':52B 'certain':54B 'compon':40B 'condit':55B 'confirm':68B 'control':49B 'core':29B,44B 'cvss':45B 'exploit':64B 'expos':56B 'fix':65B 'flaw':36B 'host':32B 'hpe':23B,33B 'inform':57B 'list':34B 'mark':63B 'may':50B 'meant':58B 'monitor':24B,39B 'privat':27B,42B 'private-5g-core':26B 'secur':48B 'self':31B 'self-host':30B 'user':61B 'vendor':71B 'version':66B","search_c":"'access':97C 'allow':85C 'author':102C 'certain':83C 'circumv':90C 'compon':79C 'condit':84C 'control':87C 'could':93C 'exist':75C 'exploit':92C 'inform':99C 'intend':100C 'may':81C 'monitor':78C 'result':94C 'secur':86C 'success':91C 'unauthor':96C 'user':103C 'vulner':74C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:49+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95782","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95782","severity":null,"published_at":"2026-11-10T20:19:49+00:00","modified_at":"2026-11-10T20:19:49+00:00","first_seen_at":"2026-11-10T20:46:17+00:00","fetched_at":"2026-11-10T20:46:17+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95782:2719","url":"https://hol.org/guard/security/cves/CVE-2026-95782-monitoring-interface-vulnerability-could-permit","severity":null,"published_at":"2026-11-10T20:53:33+00:00","modified_at":"2026-11-10T20:53:33+00:00","first_seen_at":"2026-11-10T20:53:33+00:00","fetched_at":"2026-11-10T20:53:33+00:00","note":"CVE record cites HPE bulletin hpesbnw05179 (support.hpe.com); I could not retrieve it (empty fetch, CSAF 404), so fix/versions unconfirmed and nothing verified. Product mapped by HOL feed: HPE Private 5G Core, all versions, no fix reported. Earlier Aruba P5G Core bulletins fixed in 1.26.1.x but not confirmed for this CVE. Revisit once bulletin is readable.","cites":["https://hol.org/guard/security/cves/CVE-2026-95782-monitoring-interface-vulnerability-could-permit"]}],"documents":[{"id":118324,"url":"https://hol.org/guard/security/cves/CVE-2026-95782-monitoring-interface-vulnerability-could-permit","title":"HOL Guard record CVE-2026-95782 (cites HPE bulletin hpesbnw05179)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}