HPE Aruba Private 5G Platform Vulnerability Enables Credential Theft Attacks

HPE disclosed CVE-2026-23818, an open redirect vulnerability in the Aruba Private 5G Core On-Prem GUI that allows attackers to craft malicious URLs which redirect authenticated users to attacker-controlled pages that mimic the legitimate login, capture credentials, and then return users to the real portal; the advisory warns of potential administrative account compromise and recommends applying patch HPESBNW05032, enabling MFA, and training users to detect suspicious links.