CVE-2026-95759: Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer
Published Nov 3, 2026
·Updated
Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.
Event History
Nov 3, 2026
CVE Published
via MITRE·07:51 PM
Data Sourced
via MITRE·07:51 PM
DescriptionSeverity
Data Sourced
via NVD·08:18 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must already be authenticated to the Fabric Composer API and have low privileges. No user interaction is required.
2
What is the security impact of successful exploitation?
An attacker could suppress audit records of their activity, reducing visibility and hindering investigation. The provided impact assessment indicates integrity impact, with no confidentiality or availability impact.
3
Is this exploitable remotely?
Yes. The attack vector is network-based, so an authenticated attacker able to reach the affected API could attempt exploitation.