{"id":"CVE-2026-95736","kind":"vulnerability","aliases":["CVE-2026-95736"],"related":[],"title":"HPE Networking Fabric Composer: certificate validation flaw lets attackers intercept data","description":"Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept sensitive information.","summary":"HPE Networking Fabric Composer does not properly validate certificates on an affected interface. An attacker on an adjacent network can intercept sensitive information if certain conditions outside their control are met.","severity":"high","cvss":8.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Fabric Composer","fixed":["7.3.5","7.4.1"],"affected":"<= 7.3.4, 7.4.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["adjacent-network","fabric-composer","hpe","infrastructure","networking"],"not_affected_if":["fixed-version-7.3.5","fixed-version-7.4.1","unknown"],"how_to_check":"Check the installed Fabric Composer version: affected if 7.4.0 or below, or 7.3.4 or below. HPE does not say how to read the version or name the affected interface; see the portal. Also check whether the management network is shared with untrusted hosts, since the attacker must be adjacent.","fix":"Upgrade HPE Networking Fabric Composer to 7.4.1 or later (7.4.x branch) or 7.3.5 or later (7.3.x branch); download from the HPE Networking Support Portal.","status":"open","published_at":"2026-11-03T20:18:21+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","triaged_at":"2026-11-03T20:49:47+00:00","updated_at":"2026-11-03T21:00:39+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-03T20:49:47Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Networking Fabric Composer: certificate validation flaw lets attackers intercept data","impact":"medium","summary":"HPE Networking Fabric Composer does not properly validate certificates on an affected interface. An attacker on an adjacent network can intercept sensitive information if certain conditions outside their control are met.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","fabric-composer","networking"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Sensitive information intercepted in transit by an adjacent attacker","analyst_note":"Find the HPE advisory listing affected Fabric Composer versions, the affected interface, and the preconditions, and whether a fixed version exists.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams running HPE Networking Fabric Composer where the affected interface is reachable from an adjacent network segment. The sources do not name the affected versions or the specific interface, so whether a given deployment is exposed is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000637,"input_tokens":4128,"output_tokens":448,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the HPE advisory listing affected Fabric Composer versions, the affected interface, and the preconditions, and whether a fixed version exists.","search":"'-2026':13A,16A '-95736':14A,17A 'adjac':21B,46B,81C 'adjacent-network':20B 'affect':40B,67C 'allow':97C 'attack':9A,43B,82C,89C,99C 'certain':53B,84C 'certif':5A,37B,61C 'compos':4A,25B,32B,73C 'composer':19A 'condit':54B 'control':57B,91C 'could':75C,96C 'cve':12A,15A 'data':11A 'exist':64C 'exploit':77C,95C 'fabric':3A,18A,24B,31B,72C 'fabric-compos':23B 'flaw':7A 'hpe':1A,26B,29B,70C 'improp':60C 'inform':51B,103C 'infrastructur':27B 'intercept':10A,49B,101C 'interfac':41B,68C 'let':8A 'met':59B,93C 'network':2A,22B,28B,30B,47B,71C 'outsid':55B,86C 'precondit':85C 'proper':35B 'sensit':50B,102C 'success':94C 'unauthent':80C 'valid':6A,36B,62C 'vulner':63C","nicknames":[],"mitigations":[],"who_affected":"Any HPE Networking Fabric Composer deployment on 7.4.0 or below, or 7.3.4 or below. The attacker must be on an adjacent network and certain preconditions outside their control must be met (CVSS attack complexity high), then they can intercept sensitive information. HPE does not name the affected interface. Teams with Fabric Composer isolated on a dedicated management segment have lower exposure; others can skip.","tier":"B","verified":{"fix":{"at":"2026-11-03T21:00:39Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1550},"products":{"at":"2026-11-03T21:00:39Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1550},"who_affected":{"at":"2026-11-03T21:00:39Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1550}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["composer","fabriccomposer"],"ptokens":["composer","fabric"],"labels":["adjacentnetwork","fabriccomposer","high","hpe","infrastructure","networking"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95736","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95736","severity":null,"published_at":"2026-11-03T20:18:21+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","fetched_at":"2026-11-03T20:49:25+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95736:1550","url":null,"severity":null,"published_at":"2026-11-03T21:00:39+00:00","modified_at":"2026-11-03T21:00:39+00:00","first_seen_at":"2026-11-03T21:00:39+00:00","fetched_at":"2026-11-03T21:00:39+00:00","note":"Read HPE CSAF advisory HPESBNW05172 (2026-Nov-03). Affected 7.4.0 and below, 7.3.4 and below; fixed 7.4.1+/7.3.5+. HPE does not name the interface. No exploitation or public discussion known per HPE. X not checked (not needed)."}],"documents":[{"id":60639,"url":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","title":"HPESBNW05172 rev.1 - Multiple Vulnerabilities in HPE Networking Fabric Composer (AFC)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}