{"id":"CVE-2026-95783","kind":"vulnerability","aliases":["CVE-2026-95783"],"related":[],"title":"HPE Private 5G Core: network processing flaw can cause service disruption (CVE-2026-95783)","description":"A vulnerability exists in a network-facing component that may, under certain conditions, result in service disruption. Successful exploitation could cause temporary unavailability of affected functionality.","summary":"HPE (CNA, CVSS 7.5, network, no auth, availability impact only) published this with several sibling Private 5G Core CVEs (CVE-2026-95780 to 95786). An aggregator lists it as a Private 5G Core network processing vulnerability that could cause service disruption. Versions and fix are not yet readable from HPE's own bulletin.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["denial-of-service","hpe","other","private-5g-core","self-hosted"],"not_affected_if":[],"how_to_check":"Check whether you run HPE (Aruba) Networking Private 5G Core and note its version. Compare it with the HPE bulletin for the November 10, 2026 batch (advance notice HPESBNW05178) once the full advisory is published. Affected versions are unknown until then.","fix":"unknown: HPE's advisory text for this CVE could not be read. Earlier Private 5G Core bulletins fixed issues by upgrading the software, so watch for the November 2026 bulletin.","status":"open","published_at":"2026-11-10T20:19:49+00:00","first_seen_at":"2026-11-10T20:46:17+00:00","triaged_at":"2026-11-10T20:47:44+00:00","updated_at":"2026-11-10T20:53:20+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-10T20:47:44Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Unnamed network component flaw may cause temporary service disruption","impact":"low","summary":"A network-facing component has a vulnerability that may, under certain conditions, cause service disruption. Successful exploitation could make the affected functionality temporarily unavailable.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Temporary unavailability of the affected network-facing functionality","analyst_note":"Identify the affected product from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-95783; the description names no component, versions or fix.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00063,"input_tokens":4502,"output_tokens":360,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the affected product from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-95783; the description names no component, versions or fix.","search":"'-2026':13A,16A,19A,54B '-95780':55B '-95783':14A,17A,20A '5g':3A,29B,50B,65B '7.5':37B '95786':57B 'affect':112C 'aggreg':59B 'auth':40B 'avail':41B 'bulletin':86B 'caus':9A,72B,108C 'certain':99C 'cna':35B 'compon':95C 'condit':100C 'core':4A,30B,51B,66B 'could':71B,107C 'cve':12A,15A,18A,53B 'cves':52B 'cvss':36B 'denial':22B 'denial-of-servic':21B 'disrupt':11A,74B,104C 'exist':89C 'exploit':106C 'face':94C 'fix':77B 'flaw':7A 'function':113C 'host':33B 'hpe':1A,25B,34B,83B 'impact':42B 'list':60B 'may':97C 'network':5A,38B,67B,93C 'network-fac':92C 'privat':2A,28B,49B,64B 'private-5g-core':27B 'process':6A,68B 'publish':44B 'readabl':81B 'result':101C 'self':32B 'self-host':31B 'servic':10A,24B,73B,103C 'sever':47B 'sibl':48B 'success':105C 'temporari':109C 'unavail':110C 'version':75B 'vulner':69B,88C 'yet':80B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["denialofservice","high","hpe","other","private5gcore","selfhosted"],"campaign_type":null,"search_a":"'-2026':13A,16A,19A '-95783':14A,17A,20A '5g':3A 'caus':9A 'core':4A 'cve':12A,15A,18A 'disrupt':11A 'flaw':7A 'hpe':1A 'network':5A 'privat':2A 'process':6A 'servic':10A","search_b":"'-2026':54B '-95780':55B '5g':29B,50B,65B '7.5':37B '95786':57B 'aggreg':59B 'auth':40B 'avail':41B 'bulletin':86B 'caus':72B 'cna':35B 'core':30B,51B,66B 'could':71B 'cve':53B 'cves':52B 'cvss':36B 'denial':22B 'denial-of-servic':21B 'disrupt':74B 'fix':77B 'host':33B 'hpe':25B,34B,83B 'impact':42B 'list':60B 'network':38B,67B 'privat':28B,49B,64B 'private-5g-core':27B 'process':68B 'publish':44B 'readabl':81B 'self':32B 'self-host':31B 'servic':24B,73B 'sever':47B 'sibl':48B 'version':75B 'vulner':69B 'yet':80B","search_c":"'affect':112C 'caus':108C 'certain':99C 'compon':95C 'condit':100C 'could':107C 'disrupt':104C 'exist':89C 'exploit':106C 'face':94C 'function':113C 'may':97C 'network':93C 'network-fac':92C 'result':101C 'servic':103C 'success':105C 'temporari':109C 'unavail':110C 'vulner':88C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:49+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95783","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95783","severity":null,"published_at":"2026-11-10T20:19:49+00:00","modified_at":"2026-11-10T20:19:49+00:00","first_seen_at":"2026-11-10T20:46:17+00:00","fetched_at":"2026-11-10T20:46:17+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95783:2718","url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05178en_us&docLocale=en_US","severity":null,"published_at":"2026-11-10T20:53:20+00:00","modified_at":"2026-11-10T20:53:20+00:00","first_seen_at":"2026-11-10T20:53:20+00:00","fetched_at":"2026-11-10T20:53:20+00:00","note":"CNA is HPE (cvss_by security-alert@hpe.com). Product Private 5G Core comes only from the SecHOT aggregator. HPE advance notification HPESBNW05178 returned no body text, and the CSAF txt guess returned nothing. No versions or fix, nothing verified. Revisit when the full HPE bulletin is out.","cites":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05178en_us&docLocale=en_US","https://www.sechot.net/vendor/hewlett-packard-enterprise-hpe"]}],"documents":[{"id":118322,"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05178en_us&docLocale=en_US","title":"HPESBNW05178 rev.1 - HPE Networking Advance Notification of Security Advisories for November 10, 2026","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":118323,"url":"https://www.sechot.net/vendor/hewlett-packard-enterprise-hpe","title":"SecHOT: HPE vulnerabilities (lists CVE-2026-95783 under Private 5G Core)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}