Back Cybersecuritynews

HPE AutoPass Vulnerability Let Attackers Bypass Authentication Remotely

Cybersecuritynews •Abinaya • March 4, 2026

A security bulletin has been issued regarding a vulnerability in the AutoPass License Server (APLS) that could allow attackers to remotely bypass authentication controls. The issue is tracked as CVE-2026-23600 and is rated important with a CVSS base score of 7.3. According to HPE, the flaw could be exploited over the network without requiring privileges […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

HPE AutoPass Vulnerability Enables Remote Authentication Bypass A critical vulnerability has been identified in the HPE AutoPass License Server (APLS) that allows remote attackers to bypass authentication. Discovered by Trend Micro's Zero-Day Initiative, the vulnerability is documented under CVE-2026-23600, which was published on March 2, 2026. Hewlett Packard Enterprise has issued a warning regarding this issue, although specific details have not been disclosed. 13 sources 37

Extracted Entities

HPE AutoPass Vulnerability Let Attackers Bypass Authentication Remotely

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)