CVE-2026-95745: Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer

Published Nov 3, 2026

Updated

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to cause the management services to become unavailable.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:51 PM

Data Sourced

via MITRE·07:51 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this vulnerability?

An unauthenticated remote attacker could exploit the issue through the HPE Networking Fabric Composer API. No privileges or user interaction are required.

What is the operational impact of successful exploitation?

Successful exploitation can make Fabric Composer management services unavailable, resulting in a denial of service. The provided information does not indicate confidentiality or integrity impact.

Are deployments with the API exposed to the network at particular risk?

Yes. The attack vector is network-based and the attacker does not need authentication, so systems whose API is reachable by untrusted remote parties are exposed to the described attack path.

CVE-2026-95745: Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What is the operational impact of successful exploitation?

Are deployments with the API exposed to the network at particular risk?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What is the operational impact of successful exploitation?

Are deployments with the API exposed to the network at particular risk?