CVE-2026-95761: Authenticated Improper Certificate Validation leads to Information Disclosure in HPE Networking Fabric Composer

Published Nov 3, 2026

Updated

An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to obtain sensitive information.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:51 PM

Data Sourced

via MITRE·07:51 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

What level of access does an attacker need?

An attacker must already be authenticated to HPE Networking Fabric Composer and have low privileges. The attack can be performed remotely and does not require user interaction.

What is the likely impact if exploited?

Successful exploitation could expose sensitive information. The provided severity vector indicates high confidentiality impact, low integrity impact, and no availability impact.

How difficult is exploitation expected to be?

The supplied severity vector rates attack complexity as high, meaning exploitation requires conditions beyond simply having authenticated low-privilege access.

CVE-2026-95761: Authenticated Improper Certificate Validation leads to Information Disclosure in HPE Networking Fabric Composer

Event History

Frequently Asked Questions

What level of access does an attacker need?

What is the likely impact if exploited?

How difficult is exploitation expected to be?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need?

What is the likely impact if exploited?

How difficult is exploitation expected to be?