{"id":"CVE-2026-95735","kind":"vulnerability","aliases":["CVE-2026-95735"],"related":[],"title":"HPE Networking Fabric Composer: certificate validation flaw can expose credentials","description":"An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker, under certain preconditions outside the attacker's control, to obtain sensitive information, including credentials.","summary":"HPE Networking Fabric Composer does not properly validate certificates, so a network attacker can be trusted in place of the real service. A successful attack can reveal sensitive information, including credentials.","severity":"high","cvss":8.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"HPE Networking Fabric Composer","fixed":[],"affected":"unknown (HPE has not published versions)","ecosystem":"vendor"}],"ecosystems":[],"tags":["hpe","infrastructure","network-management","networking-fabric-composer"],"not_affected_if":["unknown"],"how_to_check":"Unknown until HPE publishes the bulletin. Check your Fabric Composer version in the UI and compare it with HPE's Nov 3 2026 advisory when it is out. Also check whether Fabric Composer connects to other systems (switches, directories, integrations) over TLS without strict certificate verification.","fix":null,"status":"open","published_at":"2026-11-03T20:18:21+00:00","first_seen_at":"2026-11-03T20:49:24+00:00","triaged_at":"2026-11-03T20:49:46+00:00","updated_at":"2026-11-03T21:00:29+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-03T20:49:46Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Networking Fabric Composer: certificate validation flaw can expose credentials","impact":"high","summary":"HPE Networking Fabric Composer does not properly validate certificates, so a network attacker can be trusted in place of the real service. A successful attack can reveal sensitive information, including credentials.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","networking-fabric-composer","network-management"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"credentials and sensitive data exposed to a remote attacker","analyst_note":"Find the affected version ranges, the fix and the vendor advisory for CVE-2026-95735 and the preconditions the description mentions.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organizations that run HPE Networking Fabric Composer, particularly where it connects to other systems over the network using certificates. The sources do not describe the exact configuration that makes it exposed or name affected versions.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000625,"input_tokens":4100,"output_tokens":430,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected version ranges, the fix and the vendor advisory for CVE-2026-95735 and the preconditions the description mentions.","search":"'-2026':12A,15A '-95735':13A,16A 'allow':75C 'attack':42B,54B,79C,85C 'certain':81C 'certif':5A,38B,63C 'compos':4A,29B,33B,71C 'composer':20A 'control':87C 'could':74C 'credenti':10A,60B,93C 'cve':11A,14A 'exist':66C 'exploit':73C 'expos':9A 'fabric':3A,19A,28B,32B,70C 'flaw':7A 'hpe':1A,17A,21B,30B,68C 'improp':62C 'includ':59B,92C 'inform':58B,91C 'infrastructur':22B 'manag':25B 'network':2A,24B,27B,31B,41B,69C 'network-manag':23B 'networking':18A 'networking-fabric-compos':26B 'obtain':89C 'outsid':83C 'place':47B 'precondit':82C 'proper':36B 'real':50B 'remot':78C 'reveal':56B 'sensit':57B,90C 'servic':51B 'success':53B,72C 'trust':45B 'unauthent':77C 'valid':6A,37B,64C 'vulner':65C","nicknames":[],"mitigations":[],"who_affected":"Teams running HPE Networking Fabric Composer. The attacker needs a network position between Composer and a service it trusts, plus conditions HPE describes as outside the attacker's control. HPE has not yet named affected versions or the exact configuration, so treat every Composer deployment as possibly affected until the bulletin is out.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["hpenetworkingfabriccomposer","networkingfabriccomposer"],"ptokens":["composer","fabric","hpe","networking"],"labels":["high","hpe","infrastructure","networkingfabriccomposer","networkmanagement"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95735","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95735","severity":null,"published_at":"2026-11-03T20:18:21+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:24+00:00","fetched_at":"2026-11-03T20:49:24+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95735:1551","url":null,"severity":null,"published_at":"2026-11-03T21:00:29+00:00","modified_at":"2026-11-03T21:00:29+00:00","first_seen_at":"2026-11-03T21:00:29+00:00","fetched_at":"2026-11-03T21:00:29+00:00","note":"HPE's own advisory for this CVE is not published yet: the CSAF index (csaf.arubanetworking.hpe.com/2026) has nothing newer than hpesbnw05171, and the Nov 3 advance notice HPESBNW05166 lists Fabric Composer but gives no versions or CVE ids (the page text I could read was empty). The Sept advisory HPESBNW05133 (7.3.3 and below, fixed in 7.3.4 / 7.4.0) covers other CVEs, so I did not apply its ranges here. Fix and affected versions stay unknown until the Nov 3 bulletin appears; revisit then."}],"documents":[{"id":60637,"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05166en_us&docLocale=en_US","title":"HPESBNW05166 rev.1 - HPE Networking Advance Notification of Security Advisories for November 03, 2026","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}