CVE-2026-95740: Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Information Disclosure in HPE Networking Fabric Composer

Published Nov 3, 2026

Updated

An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept communications between the affected system and remote servers if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain sensitive information.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:50 PM

Data Sourced

via MITRE·07:50 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

What access does an attacker need to attempt exploitation?

The attacker must be adjacent to the affected system. No authentication or user interaction is required, but exploitation depends on certain preconditions outside the attacker’s control.

Does this issue affect service availability?

The supplied severity vector indicates no availability impact. It indicates high confidentiality and integrity impact if exploitation succeeds.

CVE-2026-95740: Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Information Disclosure in HPE Networking Fabric Composer

Event History

Frequently Asked Questions

What access does an attacker need to attempt exploitation?

Does this issue affect service availability?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to attempt exploitation?

Does this issue affect service availability?