CVE-2026-95777: Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface

Published Nov 3, 2026

Updated

A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged attacker to obtain certain sensitive information stored on the affected system.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:51 PM

Data Sourced

via MITRE·07:51 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this issue?

An attacker needs low-privileged authenticated access to the HPE Networking Fabric Composer management interface. The issue is reachable over the network, but the provided information does not indicate that unauthenticated users can exploit it.

What is the expected impact of successful exploitation?

A successful attacker could obtain certain sensitive information stored on the affected system. The provided severity vector indicates confidentiality impact only; no integrity or availability impact is identified.

How difficult is exploitation expected to be?

The vulnerability is rated as having high attack complexity. In addition to requiring low-privileged access, exploitation requires conditions not described in the available information.

CVE-2026-95777: Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the expected impact of successful exploitation?

How difficult is exploitation expected to be?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the expected impact of successful exploitation?

How difficult is exploitation expected to be?