CVE-2026-76657: Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access
Published Sep 1, 2026
·Updated
Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the HPE Networking Fabric Composer host.
Affected Software
1 affected component
HPE Networking Fabric Composer API
Event History
Sep 1, 2026
CVE Published
via MITRE·07:47 PM
Data Sourced
via MITRE·07:47 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker could exploit the affected API. No prior privileges or user interaction are indicated.
2
What level of access could successful exploitation provide?
Successful exploitation could grant administrative privileges and lead to complete compromise of the HPE Networking Fabric Composer host.
3
Is this issue exposed over the network?
Yes. The attack vector is network-based, so systems with reachable affected API endpoints are relevant for triage.