CVE-2026-95764: Unauthenticated Adjacent Improper Certificate Validation in HPE Networking Fabric Composer
Published Nov 3, 2026
·Updated
An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to access sensitive information.
Event History
Nov 3, 2026
CVE Published
via MITRE·07:51 PM
Data Sourced
via MITRE·07:51 PM
DescriptionSeverity
Data Sourced
via NVD·08:18 PM
DescriptionSeverity
Frequently Asked Questions
1
What network position does an attacker need to exploit this issue?
The attacker must be adjacent to the affected system's network. No prior authentication is required, but user interaction is required for successful exploitation.
2
What is the expected impact if exploitation succeeds?
Successful exploitation could allow the attacker to access sensitive information. The provided severity vector indicates no integrity or availability impact.