Skip to main content
CVE-2026-23600 CRITICAL CVSS 10.0 Autopass License Server Verified Advisory

Remote authentication bypass in HPE AutoPass License Server (CVE-2026-23600)

A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS). The vulnerability can be exploited remotely without authentication, posing a risk to the confidentiality, integrity, and availability of affected systems. Affected versions: - HPE AutoPass License Server prior to 9.19 We recommend updating to: HPE AutoPass License Server (APLS) 9.19. CVSS 10.0 · our assessment: act_now Reference: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn05003en_us&docLocale=en_US Details: https://vuln.today/cve/CVE-2026-23600

Verified by vuln.today against published advisories.

Affected versions

  • – HPE AutoPass License Server prior to 9.19

Fixed in: HPE AutoPass License Server (APLS) 9.19

Full CVE analysis Reference Published Aug 10, 2026

← All verified advisories

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy