CVE-2026-95748: Unauthenticated Adjacent SQL Injection Vulnerability in HPE Networking Fabric Composer

Published Nov 3, 2026

Updated

A SQL injection vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to run arbitrary database commands.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:51 PM

Data Sourced

via MITRE·07:51 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

Who is realistically exposed to this vulnerability?

Systems running HPE Networking Fabric Composer are exposed if an attacker can access them from an adjacent network. The vulnerability does not require authentication.

What does an attacker need to exploit it?

An attacker needs adjacent-network access and must overcome high attack complexity. No privileges or user interaction are required.

What could successful exploitation allow?

Successful exploitation could allow the attacker to execute arbitrary database commands, with high potential impact to confidentiality, integrity, and availability.

CVE-2026-95748: Unauthenticated Adjacent SQL Injection Vulnerability in HPE Networking Fabric Composer

Event History

Frequently Asked Questions

Who is realistically exposed to this vulnerability?

What does an attacker need to exploit it?

What could successful exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this vulnerability?

What does an attacker need to exploit it?

What could successful exploitation allow?