{"id":"CVE-2026-95731","kind":"vulnerability","aliases":["CVE-2026-95731"],"related":[],"title":"HPE Networking Fabric Composer: hardcoded passwords give remote attackers admin access","description":"Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. Successful exploitation could allow an attacker to gain unauthorized administrative access to the affected system with elevated privileges.","summary":"HPE Networking Fabric Composer's command-line interface ships with hardcoded passwords. An unauthenticated remote attacker who uses them can gain administrative access with elevated privileges.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["cli","hardcoded-credentials","hpe","infrastructure","networking-fabric-composer"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-03T20:18:21+00:00","first_seen_at":"2026-11-03T20:49:24+00:00","triaged_at":"2026-11-03T20:49:38+00:00","updated_at":"2026-11-03T20:50:53+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-03T20:49:38Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Networking Fabric Composer: hardcoded passwords give remote attackers admin access","impact":"high","summary":"HPE Networking Fabric Composer's command-line interface ships with hardcoded passwords. An unauthenticated remote attacker who uses them can gain administrative access with elevated privileges.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","networking-fabric-composer","cli"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Remote attacker gains administrative control of the affected system","analyst_note":"Find HPE's security bulletin for affected and fixed versions, and whether the CLI is exposed by default (NVD link only in sources).","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organizations running HPE Networking Fabric Composer with its command-line interface reachable over the network are exposed. The sources do not state which versions are affected or whether the interface is enabled by default.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000628,"input_tokens":4133,"output_tokens":429,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find HPE's security bulletin for affected and fixed versions, and whether the CLI is exposed by default (NVD link only in sources).","search":"'-2026':13A,16A '-95731':14A,17A 'access':11A,51B,76C,93C 'admin':10A 'administr':50B,92C 'affect':78C,96C 'allow':70C,86C 'attack':9A,44B,74C,88C 'cli':18B 'command':34B,61C 'command-lin':33B,60C 'compos':4A,27B,31B,68C 'could':69C,85C 'credenti':21B,82C 'cve':12A,15A 'elev':53B,99C 'exploit':84C 'fabric':3A,26B,30B,67C 'gain':49B,90C 'give':7A 'hardcod':5A,20B,39B,55C,81C 'hardcoded-credenti':19B 'hpe':1A,22B,28B,65C 'infrastructur':23B 'interfac':36B,63C 'line':35B,62C 'network':2A,25B,29B,66C 'networking-fabric-compos':24B 'password':6A,40B,56C 'privileg':54B,100C 'remot':8A,43B,73C 'ship':37B 'success':83C 'system':79C,97C 'unauthent':42B,72C 'unauthor':91C 'use':46B,80C 'vulner':57C","nicknames":[],"mitigations":[],"who_affected":"Organizations running HPE Networking Fabric Composer with its command-line interface reachable over the network are exposed. The sources do not state which versions are affected or whether the interface is enabled by default.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["cli","critical","hardcodedcredentials","hpe","infrastructure","networkingfabriccomposer"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95731","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95731","severity":null,"published_at":"2026-11-03T20:18:21+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:24+00:00","fetched_at":"2026-11-03T20:49:24+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95731:1531","url":null,"severity":null,"published_at":"2026-11-03T20:50:53+00:00","modified_at":"2026-11-03T20:50:53+00:00","first_seen_at":"2026-11-03T20:50:53+00:00","fetched_at":"2026-11-03T20:50:53+00:00","note":"HPE's primary bulletin for this CVE not found: HPE advance notice HPESBNW05166 (Nov 3 2026, lists Fabric Composer, no versions) and the CVE published today; the Nov 3 bulletin isn't indexed yet. Sep bulletin HPESBNW05133 (7.3.3 and below, fixed 7.3.4/7.4.0) is a different CVE set and I did not see this CVE in the part I could read, so I did not apply those versions. No versions, fix or CLI default-exposure confirmed; nothing verified. Revisit once the Nov 3 bulletin posts (networkingsupport.hpe.com/notification/security). HPE's generic workaround for Fabric Composer CLI/web: restrict to dedicated L2 segment/VLAN or L3 firewall policies."}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}