{"id":"CVE-2026-95786","aliases":[],"cve":{"records":[{"id":"CVE-2026-95786","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:55:16.434Z","published":"2026-11-10T20:07:12.276Z","modified":"2026-11-10T20:07:12.276Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-10T20:07:12.276Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05179en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[],"applicability":[],"prioritization":[]},"title":"Access Control Vulnerability Could Permit Unauthorized Interaction with Protected Services","titleSource":"hpe","descriptionSource":"hpe","description":"A vulnerability exists in a system interface that may, under certain conditions, fail to properly enforce authorization boundaries. Successful exploitation could allow an unauthorized party to access or modify protected system information, potentially affecting confidentiality and integrity.","score":6.5,"severity":"medium","published":"2026-11-10T20:07:12.276Z","modified":"2026-11-10T20:07:12.276Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Private 5G Core (P5G Core)","platforms":[],"versions":[{"version":"0.0.0.0","status":"affected","lessThanOrEqual":"1.26.1.4","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95786"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05179en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95786","modified":"2026-11-10T20:07:12.276Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95786"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","score":6.5}],"sourceAffected":[],"observedAt":"2026-11-10T20:41:54.697Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:30:30.969Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"A vulnerability in HPE's Private 5G Core (P5G Core) version 0.0.0.0 to 1.26.1.4 may fail to enforce authorization, potentially allowing unauthorized access or modification of protected system information. The impact on confidentiality and integrity is possible. Access conditions are uncertain.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-12T10:51:14.372Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95786"}]}}