CVE-2026-95753: Privilege Escalation in HPE Networking Fabric Composer API
Published Nov 3, 2026
·Updated
A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to disclose network traffic from switches managed by Fabric Composer.
Event History
Nov 3, 2026
CVE Published
via MITRE·07:51 PM
Data Sourced
via MITRE·07:51 PM
DescriptionSeverity
Data Sourced
via NVD·08:18 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must already be authenticated to the Fabric Composer API with a low-privileged account. No user interaction is required.
2
What is the impact of successful exploitation?
A successful attacker could disclose network traffic from switches managed by Fabric Composer. The supplied severity vector indicates high confidentiality impact and low integrity impact, with no availability impact.