HPE AutoPass Vulnerability Enables Remote Authentication Bypass

A critical vulnerability has been identified in the HPE AutoPass License Server (APLS) that allows remote attackers to bypass authentication. Discovered by Trend Micro's Zero-Day Initiative, the vulnerability is documented under CVE-2026-23600, which was published on March 2, 2026. Hewlett Packard Enterprise has issued a warning regarding this issue, although specific details have not been disclosed.