Live › vulnerability › CVE-2026-95732
An authentication bypass in the operating system underneath HPE Networking Fabric Composer lets an unauthenticated attacker on an adjacent network run arbitrary code on the affected system. The sources give a CVSS score of 9.6 and say nothing about exploitation in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Teams running HPE Networking (Aruba) Fabric Composer, especially where the host's operating system is reachable from an adjacent network segment. HPE has not yet been found to publish affected versions for this specific CVE ID; the related September bulletin (CVE-2026-19766) lists 7.3.3 and below. Teams not running Fabric Composer can skip it.
No product ranges from the sources yet.
7.3.3 and below as affected by the similar CVE-2026-19766; whether CVE-2026-95732 covers the same versions is unconfirmedNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system.
This page as .md · .json · in your agent: get_signal("CVE-2026-95732")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.