Critical severity9.8NVD Advisory· Published Mar 2, 2026· Updated Aug 10, 2026
CVE-2026-23600
CVE-2026-23600
Description
A remote authentication bypass vulnerability
exists in HPE AutoPass License Server (APLS).
Affected products
3cpe:2.3:a:hpe:autopass_license_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hpe:autopass_license_server:*:*:*:*:*:*:*:*range: <9.19
- (no CPE)
- Hewlett Packard Enterprise (HPE)/HPE AutoPass License Server (APLS)v5Range: 0
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
1- ZDI-26-134: Hewlett Packard Enterprise AutoPass License Server Authentication Bypass VulnerabilityZero Day Initiative · Mar 3, 2026