{"id":"CVE-2026-95732","kind":"vulnerability","aliases":["CVE-2026-95732"],"related":[],"title":"HPE Fabric Composer: authentication bypass in operating system allows code execution","description":"An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system.","summary":"An authentication bypass in the operating system underneath HPE Networking Fabric Composer lets an unauthenticated attacker on an adjacent network run arbitrary code on the affected system. The sources give a CVSS score of 9.6 and say nothing about exploitation in the wild.","severity":"critical","cvss":9.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["fabric-composer","hpe","infrastructure","network-appliance"],"not_affected_if":[],"how_to_check":"Confirm whether HPE Networking Fabric Composer (AFC) is deployed and note the version. HPE's Sep 2026 bulletin HPESBNW05133 lists 7.3.3 and below as affected by the similar CVE-2026-19766; whether CVE-2026-95732 covers the same versions is unconfirmed. Watch the HPE Networking security advisories page for the November 2026 bulletin.","fix":null,"status":"open","published_at":"2026-11-03T20:18:21+00:00","first_seen_at":"2026-11-03T20:49:24+00:00","triaged_at":"2026-11-03T20:49:39+00:00","updated_at":"2026-11-03T20:50:52+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-03T20:49:39Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Fabric Composer: authentication bypass in operating system allows code execution","impact":"high","summary":"An authentication bypass in the operating system underneath HPE Networking Fabric Composer lets an unauthenticated attacker on an adjacent network run arbitrary code on the affected system. The sources give a CVSS score of 9.6 and say nothing about exploitation in the wild.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","fabric-composer","network-appliance"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker runs arbitrary code on the appliance without credentials","analyst_note":"Find HPE's advisory for affected versions, fixed releases and mitigations; the sources give only the NVD summary.","how_to_check":"- Confirm whether HPE Networking Fabric Composer is deployed in your environment.\n- unknown: the sources do not name affected versions or a check command.","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams running HPE Networking Fabric Composer on their network infrastructure are exposed if the appliance's underlying operating system is reachable from an adjacent network segment. The sources do not name affected versions or configurations, so the exact exposure is unknown.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000667,"input_tokens":4100,"output_tokens":514,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find HPE's advisory for affected versions, fixed releases and mitigations; the sources give only the NVD summary.","search":"'-2026':13A,16A '-95732':14A,17A '9.6':60B 'adjac':44B,90C 'affect':51B,98C 'allow':9A,87C 'applianc':25B 'arbitrari':47B,94C 'attack':41B,91C 'authent':4A,27B,70C 'bypass':5A,28B,71C 'code':10A,48B,95C 'compos':3A,20B,37B,83C 'could':86C 'cve':12A,15A 'cvss':57B 'execut':11A,93C 'exist':73C 'exploit':65B,85C 'fabric':2A,19B,36B,82C 'fabric-compos':18B 'give':55B 'hpe':1A,21B,34B,80C 'infrastructur':22B 'let':38B 'network':24B,35B,45B,81C 'network-appli':23B 'noth':63B 'oper':7A,31B,77C 'run':46B 'say':62B 'score':58B 'sourc':54B 'success':84C 'system':8A,32B,52B,78C,99C 'unauthent':40B,89C 'under':76C 'underneath':33B 'vulner':72C 'wild':68B","nicknames":[],"mitigations":[],"who_affected":"Teams running HPE Networking (Aruba) Fabric Composer, especially where the host's operating system is reachable from an adjacent network segment. HPE has not yet been found to publish affected versions for this specific CVE ID; the related September bulletin (CVE-2026-19766) lists 7.3.3 and below. Teams not running Fabric Composer can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["critical","fabriccomposer","hpe","infrastructure","networkappliance"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95732","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95732","severity":null,"published_at":"2026-11-03T20:18:21+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:24+00:00","fetched_at":"2026-11-03T20:49:24+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95732:1530","url":null,"severity":null,"published_at":"2026-11-03T20:50:52+00:00","modified_at":"2026-11-03T20:50:52+00:00","first_seen_at":"2026-11-03T20:50:52+00:00","fetched_at":"2026-11-03T20:50:52+00:00","note":"No HPE advisory found that lists CVE-2026-95732 (published 2026-11-03; HPE's Nov 3 advance notice HPESBNW05166 names Fabric Composer but the bulletin is not located). The identical-text, same-score (9.6, AV:A) bug is CVE-2026-19766 in HPESBNW05133 (Sep 1 2026; affected <=7.3.3, fixed 7.3.4 / 7.4.0; workaround: restrict management to a dedicated L2 segment/VLAN or firewall). Possible duplicate or re-issue; code decides merges. Linked as mentions only; nothing verified. Revisit when the Nov 3 HPE bulletin appears."}],"documents":[{"id":60632,"url":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05133.txt","title":"HPESBNW05133 Multiple Vulnerabilities in HPE Networking Fabric Composer (Sep 2026, earlier bulletin; does not list CVE-2026-95742 in the part I could read)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}