CVE-2026-95771: Authenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint

Published Nov 3, 2026

Updated

An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated remote attacker to obtain limited information about the affected system.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:51 PM

Data Sourced

via MITRE·07:51 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this issue?

An attacker must be authenticated and able to reach the affected API endpoint remotely. The provided information does not indicate that unauthenticated users can exploit it.

What is the expected impact if exploitation succeeds?

Successful exploitation can disclose limited information about the affected system. The supplied severity vector indicates low confidentiality impact and no stated integrity or availability impact.

Does exploitation require user interaction or complex conditions?

No user interaction is required, and the attack complexity is rated low. However, the attacker must already have authenticated access.

CVE-2026-95771: Authenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the expected impact if exploitation succeeds?

Does exploitation require user interaction or complex conditions?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the expected impact if exploitation succeeds?

Does exploitation require user interaction or complex conditions?