CVE-2026-95765: Unauthenticated Sensitive Information Disclosure in Web-Based Management Interface of HPE Networking Fabric Composer

Published Nov 3, 2026

Updated

A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:51 PM

Data Sourced

via MITRE·07:51 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker can be remote and unauthenticated, but successful exploitation requires user interaction. No special privileges are required.

What is the potential impact if exploitation succeeds?

A successful attacker could obtain sensitive information from the web-based management interface. The provided severity vector indicates low confidentiality and low integrity impact, with no availability impact.

CVE-2026-95765: Unauthenticated Sensitive Information Disclosure in Web-Based Management Interface of HPE Networking Fabric Composer

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?