CVE-2026-95767: Unauthenticated Information Disclosure in HPE Networking Fabric Composer

Published Nov 3, 2026

Updated

An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information about the affected system.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:51 PM

Data Sourced

via MITRE·07:51 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated remote attacker can exploit the affected API; no prior authentication or user interaction is required.

What is the impact of successful exploitation?

Successful exploitation could disclose sensitive information about the affected system. The provided severity vector indicates confidentiality impact only, with no stated integrity or availability impact.

How can I determine whether my deployment is affected?

Review whether your HPE Networking Fabric Composer instance exposes the affected API and consult the referenced HPE advisory for affected-product and remediation details.

CVE-2026-95767: Unauthenticated Information Disclosure in HPE Networking Fabric Composer

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

How can I determine whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

How can I determine whether my deployment is affected?