{"id":"CVE-2026-95785","aliases":[],"cve":{"records":[{"id":"CVE-2026-95785","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:55:16.434Z","published":"2026-11-10T20:07:11.580Z","modified":"2026-11-10T20:07:11.580Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-10T20:07:11.580Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05179en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[],"applicability":[],"prioritization":[]},"title":"Authenticated Component Vulnerability Could Affect System Confidentiality, Integrity, Availability, and Trusted Operations","titleSource":"hpe","descriptionSource":"hpe","description":"A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unauthorized changes to system-managed content. Successful exploitation could affect system confidentiality, integrity, and availability, and may disrupt trusted interactions among system functions.","score":7.2,"severity":"high","published":"2026-11-10T20:07:11.580Z","modified":"2026-11-10T20:07:11.580Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Private 5G Core (P5G Core)","platforms":[],"versions":[{"version":"0.0.0.0","status":"affected","lessThanOrEqual":"1.26.1.4","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95785"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05179en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95785","modified":"2026-11-10T20:07:11.580Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95785"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":7.2}],"sourceAffected":[],"observedAt":"2026-11-10T20:41:53.155Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T22:40:32.870Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"A vulnerability in HPE's Private 5G Core (P5G Core) version 0.0.0.0 to 1.26.1.4 may allow an authorized user to make unauthorized changes, potentially affecting system confidentiality, integrity, and availability. An attacker needs authorized access to exploit this weakness. The impact on trusted operations is possible.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-12T10:51:15.779Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95785"}]}}