CVE-2026-23600
CRITICAL
CVSS 10.0
Autopass License Server
Verified Advisory
Remote authentication bypass in HPE AutoPass License Server (CVE-2026-23600)
A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS). The vulnerability can be exploited remotely without authentication, posing a risk to the confidentiality, integrity, and availability of affected systems.
Affected versions:
- HPE AutoPass License Server prior to 9.19
We recommend updating to: HPE AutoPass License Server (APLS) 9.19.
CVSS 10.0 · our assessment: act_now
Reference: https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn05003en_us&docLocale=en_US
Details: https://vuln.today/cve/CVE-2026-23600
Verified by vuln.today against published advisories.
Affected versions
- – HPE AutoPass License Server prior to 9.19
Fixed in: HPE AutoPass License Server (APLS) 9.19