{"id":"CVE-2026-95785","aliases":["EUVD-2026-122896","GHSA-gpqc-rj5m-xwpx"],"status":"published","title":"Authenticated Component Vulnerability Could Affect System Confidentiality, Integrity, Availability, and Trusted Operations","description":"A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unauthorized changes to system-managed content. Successful exploitation could affect system confidentiality, integrity, and availability, and may disrupt trusted interactions among system functions.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-14","score":0.00367,"percentile":0.31045,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2026-11-10T20:07:11Z","modified":"2026-11-10T21:34:45Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"private 5g core (p5g core)"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05179en_us\u0026docLocale=en_US"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95785"},{"url":"https://github.com/advisories/GHSA-gpqc-rj5m-xwpx"}],"sources":{"cve":[{"id":"CVE-2026-95785","title":"Authenticated Component Vulnerability Could Affect System Confidentiality, Integrity, Availability, and Trusted Operations","description":"A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unauthorized changes to system-managed content. Successful exploitation could affect system confidentiality, integrity, and availability, and may disrupt trusted interactions among system functions.","status":"published","published":"2026-11-10T20:07:11.58Z","modified":"2026-11-10T20:07:11.58Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-10T22:18:30.298108Z"}],"euvd":[{"id":"EUVD-2026-122896","description":"A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unauthorized changes to system-managed content. Successful exploitation could affect system confidentiality, integrity, and availability, and may disrupt trusted interactions among system functions.","status":"published","published":"2026-11-10T20:07:11Z","modified":"2026-11-10T20:07:11Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-11T00:25:01.852805Z"}],"ghsa":[{"id":"GHSA-gpqc-rj5m-xwpx","title":"A vulnerability exists in a system component that may, under certain conditions, allow an...","description":"A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unauthorized changes to system-managed content. Successful exploitation could affect system confidentiality, integrity, and availability, and may disrupt trusted interactions among system functions.","status":"published","published":"2026-11-10T21:34:37Z","modified":"2026-11-10T21:34:45Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-10T21:57:59.297782Z"}],"nvd":[{"id":"CVE-2026-95785","description":"A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unauthorized changes to system-managed content. Successful exploitation could affect system confidentiality, integrity, and availability, and may disrupt trusted interactions among system functions.","status":"published","published":"2026-11-10T20:19:49.483Z","modified":"2026-11-12T22:09:39.233Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-10T22:21:33.755054Z"}]}}