{"id":"CVE-2026-95781","aliases":[],"cve":{"records":[{"id":"CVE-2026-95781","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:54:56.882Z","published":"2026-11-10T20:07:08.799Z","modified":"2026-11-10T20:07:08.799Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-10T20:07:08.799Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05179en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[],"applicability":[],"prioritization":[]},"title":"AthonetOS Vulnerability Could Enable Unauthorized Access or Compromise Service Integrity","titleSource":"hpe","descriptionSource":"hpe","description":"A security vulnerability exists in AthonetOS that may allow an unauthorized party to affect service operation or gain access to certain protected system functions. Successful exploitation could result in a compromise of service integrity or unauthorized system access.","score":7.5,"severity":"high","published":"2026-11-10T20:07:08.799Z","modified":"2026-11-10T20:07:08.799Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Private 5G Core (P5G Core)","platforms":[],"versions":[{"version":"0.0.0.0","status":"affected","lessThanOrEqual":"1.26.1.4","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95781"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05179en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95781","modified":"2026-11-10T20:07:08.799Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95781"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5}],"sourceAffected":[],"observedAt":"2026-11-10T20:41:47.227Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:35:33.315Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-15T01:25:33.968Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-15T00:55:37.716Z","attemptedAt":"2026-11-15T00:55:37.716Z"},{"source":"EUVD","status":"refresh-failed","attemptedAt":"2026-11-15T00:55:35.233Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-15T00:55:36.186Z","attemptedAt":"2026-11-15T00:55:36.186Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-95781","url":"https://www.first.org/epss/","probability":0.00316,"percentile":0.24903,"date":"2026-11-14","checkedAt":"2026-11-15T00:55:36.186Z"},{"source":"GitHub Advisory Database","id":"GHSA-rrm4-g498-6phg","url":"https://github.com/advisories/GHSA-rrm4-g498-6phg","modified":"2026-11-10T21:34:45Z","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-15T00:55:37.716Z"}],"aiSummary":{"text":"A vulnerability in AthonetOS may allow unauthorized access or compromise service integrity. It affects HPE Private 5G Core version 1.26.1.4 and earlier. Successful exploitation could result in service compromise or unauthorized access.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-12T10:56:02.463Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95781"}]}}