CVE-2026-95738: Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer
Authentication bypass vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain administrative access to the affected system.
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated remote attacker could exploit the affected interface, but exploitation requires certain preconditions that are outside the attacker’s control.
What level of access could successful exploitation provide?
Successful exploitation could allow the attacker to gain administrative access to the affected system.
Is exploitation straightforward?
The attack complexity is rated high. The available information indicates that required preconditions must be present, but does not specify what those preconditions are.