---
id: "CVE-2026-95782"
page: "https://infrastack.ai/live/CVE-2026-95782"
kind: "vulnerability"
aliases: ["CVE-2026-95782"]
title: "HPE Private 5G Core monitoring component flaw may expose information to unauthorized users"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "Private 5G Core", "fixed": [], "affected": "unknown (feed maps all versions)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["hpe", "monitoring", "other", "private-5g-core", "self-hosted"]
not_affected_if: []
published_at: "2026-11-10T20:19:49+00:00"
first_seen_at: "2026-11-10T20:46:17+00:00"
updated_at: "2026-11-10T20:53:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95782", "first_seen_at": "2026-11-10T20:46:17+00:00"}, {"source": "analyst", "url": "https://hol.org/guard/security/cves/CVE-2026-95782-monitoring-interface-vulnerability-could-permit", "first_seen_at": "2026-11-10T20:53:33+00:00", "cites": ["https://hol.org/guard/security/cves/CVE-2026-95782-monitoring-interface-vulnerability-could-permit"]}]
exploit_sources: []
---

# HPE Private 5G Core monitoring component flaw may expose information to unauthorized users

Link for people: https://infrastack.ai/live/CVE-2026-95782 (this .md is for agents)

HPE lists a flaw in a monitoring component of Private 5G Core (CVSS 7.5) where security controls may be bypassed under certain conditions, exposing information meant for authorized users. Not marked exploited. Fixed version not confirmed from the vendor bulletin.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Private 5G Core affected unknown (feed maps all versions) fixed no fixed version listed

## How to check

Check whether you run HPE Aruba Networking Private 5G Core and its version in My HPE Software Center or the deployment; then read HPE bulletin hpesbnw05179 for affected versions (unknown so far).

## Timeline

- 2026-11-10T20:46:17+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95782
- 2026-11-10T20:53:33+00:00 analyst https://hol.org/guard/security/cves/CVE-2026-95782-monitoring-interface-vulnerability-could-permit — CVE record cites HPE bulletin hpesbnw05179 (support.hpe.com); I could not retrieve it (empty fetch, CSAF 404), so fix/versions unconfirmed and nothing verified. Product mapped by HOL feed: HPE Private 5G Core, all versions, no fix reported. Earlier Aruba P5G Core bulletins fixed in 1.26.1.x but not confirmed for this CVE. Revisit once bulletin is readable.

## Documents

- [describes] HOL Guard record CVE-2026-95782 (cites HPE bulletin hpesbnw05179) https://hol.org/guard/security/cves/CVE-2026-95782-monitoring-interface-vulnerability-could-permit

## From the sources

A vulnerability exists in a monitoring component that may, under certain conditions, allow security controls to be circumvented. Successful exploitation could result in unauthorized access to information intended for authorized users only.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_