Critical HPE AutoPass Vulnerability Allows Remote Authentication Bypass

Back Cyberpress

Critical HPE AutoPass Vulnerability Allows Remote Authentication Bypass

Cyberpress • March 3, 2026

Share: View original

Tracked as CVE-2026-23600, this authentication bypass vulnerability enables unauthenticated users to access protected features over the network ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

HPE AutoPass Vulnerability Enables Remote Authentication Bypass A critical vulnerability has been identified in the HPE AutoPass License Server (APLS) that allows remote attackers to bypass authentication. Discovered by Trend Micro's Zero-Day Initiative, the vulnerability is documented under CVE-2026-23600, which was published on March 2, 2026. Hewlett Packard Enterprise has issued a warning regarding this issue, although specific details have not been disclosed. 13 sources 37

Extracted Entities

Attack Types (1)

CVEs (1)