CVE-2026-23818 | BDVDB-2026-325255 Detail

Description#

A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the login flow using a crafted URL. Successful exploitation may redirect an authenticated user to an attacker-controlled server hosting a spoofed login page prompting the unsuspecting victim to give away their credentials, which could then be captured by the attacker, before being redirected back to the legitimate login page.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-04-07Record published in the CVE List.