Live › vulnerability › CVE-2026-95735
HPE Networking Fabric Composer does not properly validate certificates, so a network attacker can be trusted in place of the real service. A successful attack can reveal sensitive information, including credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Teams running HPE Networking Fabric Composer. The attacker needs a network position between Composer and a service it trusts, plus conditions HPE describes as outside the attacker's control. HPE has not yet named affected versions or the exact configuration, so treat every Composer deployment as possibly affected until the bulletin is out.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| HPE Networking Fabric Composer | vendor | unknown (HPE has not published versions) | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker, under certain preconditions outside the attacker's control, to obtain sensitive information, including credentials.
This page as .md · .json · in your agent: get_signal("CVE-2026-95735")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.