CVE-2026-23818 - Vulnerability Analysis

Overview

HPE Aruba Networking Private 5G Core On-Prem contains an open redirect vulnerability in the GUI login flow caused by improper URL validation, letting attackers redirect authenticated users to malicious sites, exploit requires user authentication.

Severity & Score

Impact

Attackers can redirect authenticated users to malicious sites to steal credentials via phishing.

Mitigation

Update to the latest version with the fix applied.

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05032en_us&docLocale=en_US

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 7, 2026

🟠 CVE-2026-23818 - High (8.8) A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the login flow using a crafted URL. Successful exploi... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23818/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner