CVE-2026-95780
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
66/100
Published: 2026-11-10
Modified: 2026-11-12
First seen: 2026-11-10
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
None
Description
A vulnerability exists in the authentication and session-management mechanisms that may result in access not being fully terminated following certain account or session state changes. Under specific conditions, a remote user with prior legitimate access could retain access to protected system resources beyond the intended authorization period. Successful exploitation could result in continued unauthorized access.
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | Private 5G Core (P5G Core) | 0.0.0.0 |