HPE Networking Private 5G Core: Multiple vulnerabilities
HPE has disclosed multiple vulnerabilities affecting HPE Networking Private 5G Core versions 1.26.1.4 and earlier, necessitating review of security updates provided in bulletin HPESBNW05179.
Triage facts
Revision 1- Applicability
- HPE Networking Private 5G Core
- Evidence
- Unknown
- Severity
- Medium
- Action
- Elevated
- Sources
- 2 public sources
- Freshness
- Revision 1Nov 12, 23:01 UTC
- Source quality
- A1Roughly even chance
On November 10, 2026, Hewlett Packard Enterprise (HPE) identified multiple vulnerabilities impacting the HPE Networking Private 5G Core (P5G Core) software. The affected versions are 1.26.1.4 and earlier. HPE has released security bulletin HPESBNW05179 rev.1 to address these findings. As of the report date, specific CVE identifiers were not disclosed in the Cyber Centre advisory, and the technical details of the vulnerability classes remain limited to the vendor bulletin.
Recommendation
- Inventory all instances of HPE Networking Private 5G Core to identify versions at or below 1.26.1.4.
- Review HPE security bulletin HPESBNW05179 rev.1 immediately for technical details and available patch versions.
- Apply the necessary security updates as recommended by HPE to mitigate the identified risks.
Immediate actions
Audit network environment for HPE Networking Private 5G Core deployments.
Mitigations
Review and apply patches detailed in HPESBNW05179 rev.1.
HPE Networking Private 5G Core (<= 1.26.1.4)