EUVD-2026-19600
GHSA-28r5-hvrv-cvq5
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the login flow using a crafted URL. Successful exploitation may redirect an authenticated user to an attacker-controlled server hosting a spoofed login page prompting the unsuspecting victim to give away their credentials, which could then be captured by the attacker, before being redirected back to the legitimate login page.
AnalysisAI
Open redirect vulnerability in HPE Aruba Networking Private 5G Core On-Prem GUI enables credential harvesting attacks against authenticated users. Remote attackers can craft malicious URLs that redirect victims from the legitimate login flow to attacker-controlled phishing pages designed to capture credentials. With CVSS 8.8 (High) severity and network-reachable attack surface requiring no authentication, this represents significant phishing risk for organizations deploying private 5G infrastructure. No public exploit identified at time of analysis, though exploitation requires minimal technical complexity.
Technical ContextAI
This vulnerability affects the web-based graphical user interface of HPE Aruba Networking Private 5G Core On-Prem, a network infrastructure platform for deploying private cellular networks. Open redirect flaws occur when applications accept user-controlled input to determine redirect destinations without proper validation of the target URL. In this case, the vulnerability exists within the login flow authentication process, allowing attackers to manipulate redirect parameters. The affected product (CPE: cpe:2.3:a:hewlett_packard_enterprise_(hpe):private_5g_core) manages critical 5G network functions, making credential compromise particularly impactful as it could provide access to core network management capabilities. The CVSS vector indicates network-based exploitation (AV:N) with low attack complexity (AC:L) but requires user interaction (UI:R), consistent with typical phishing-based open redirect exploitation patterns.
RemediationAI
Organizations should immediately consult the HPE security bulletin at https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05032en_us&docLocale=en_US for patch availability and specific remediation guidance. Vendor-released patch details including exact fixed versions should be obtained directly from HPE support channels. As an interim mitigation while awaiting patches, organizations should implement security awareness training emphasizing the risks of clicking unfamiliar links to access the 5G Core GUI, enforce bookmark-based access to the management interface rather than following emailed links, deploy email security controls to detect and block phishing attempts containing crafted redirect URLs, and consider network-level access controls restricting GUI access to trusted management networks only. Monitor authentication logs for unusual login patterns that might indicate credential harvesting attempts.
More in Open Redirect
View allA malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca
GFI Kerio Control versions 9.2.5 through 9.4.5 contain an HTTP response splitting vulnerability in the dest parameter of
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect
Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 b
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (li
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3
Flarum is open source discussion platform software. Rated medium severity (CVSS 6.5), this vulnerability is remotely exp
Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites
Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the StageShow plugin before 5.0.9 for
Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link. Rated crit
Share
External POC / Exploit Code
Leaving vuln.today