{"id":"CVE-2026-95786","aliases":["EUVD-2026-122897","GHSA-hx5x-6j4v-hc49"],"status":"published","title":"Access Control Vulnerability Could Permit Unauthorized Interaction with Protected Services","description":"A vulnerability exists in a system interface that may, under certain conditions, fail to properly enforce authorization boundaries. Successful exploitation could allow an unauthorized party to access or modify protected system information, potentially affecting confidentiality and integrity.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-14","score":0.00214,"percentile":0.11797,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2026-11-10T20:07:12Z","modified":"2026-11-10T21:34:39Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"private 5g core (p5g core)"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05179en_us\u0026docLocale=en_US"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95786"},{"url":"https://github.com/advisories/GHSA-hx5x-6j4v-hc49"}],"sources":{"cve":[{"id":"CVE-2026-95786","title":"Access Control Vulnerability Could Permit Unauthorized Interaction with Protected Services","description":"A vulnerability exists in a system interface that may, under certain conditions, fail to properly enforce authorization boundaries. Successful exploitation could allow an unauthorized party to access or modify protected system information, potentially affecting confidentiality and integrity.","status":"published","published":"2026-11-10T20:07:12.276Z","modified":"2026-11-10T20:07:12.276Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-10T22:18:30.298108Z"}],"euvd":[{"id":"EUVD-2026-122897","description":"A vulnerability exists in a system interface that may, under certain conditions, fail to properly enforce authorization boundaries. Successful exploitation could allow an unauthorized party to access or modify protected system information, potentially affecting confidentiality and integrity.","status":"published","published":"2026-11-10T20:07:12Z","modified":"2026-11-10T20:07:12Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-11T00:25:01.852805Z"}],"ghsa":[{"id":"GHSA-hx5x-6j4v-hc49","title":"A vulnerability exists in a system interface that may, under certain conditions, fail to properly...","description":"A vulnerability exists in a system interface that may, under certain conditions, fail to properly enforce authorization boundaries. Successful exploitation could allow an unauthorized party to access or modify protected system information, potentially affecting confidentiality and integrity.","status":"published","published":"2026-11-10T21:34:37Z","modified":"2026-11-10T21:34:39Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-10T21:57:58.545441Z"}],"nvd":[{"id":"CVE-2026-95786","description":"A vulnerability exists in a system interface that may, under certain conditions, fail to properly enforce authorization boundaries. Successful exploitation could allow an unauthorized party to access or modify protected system information, potentially affecting confidentiality and integrity.","status":"published","published":"2026-11-10T20:19:49.603Z","modified":"2026-11-12T22:09:39.233Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-10T22:21:33.755054Z"}]}}