{"id":"CVE-2026-95737","kind":"vulnerability","aliases":["CVE-2026-95737"],"related":[],"title":"HPE Networking Fabric Composer: local privilege escalation on underlying host OS","description":"A privilege escalation vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with high privileges to gain elevated privileges on the underlying host operating system.","summary":"A local attacker who already holds high privileges on HPE Networking Fabric Composer can escalate to elevated privileges on the underlying host operating system. The sources give no further detail on the flaw or affected versions.","severity":"high","cvss":8.2,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"HPE Networking Fabric Composer","fixed":["7.3.5","7.4.1"],"affected":"<= 7.3.4, 7.4.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["fabric-composer","hpe","infrastructure","networking","privilege-escalation","self-hosted"],"not_affected_if":["product-not-deployed"],"how_to_check":"Check the installed Fabric Composer version. Affected: 7.4.0 and below, 7.3.4 and below (end-of-maintenance releases are presumed affected). Also review who holds high-privilege or shell access on the Fabric Composer host.","fix":"Upgrade HPE Networking Fabric Composer to 7.4.1 or later (7.4.x) or 7.3.5 or later (7.3.x); download from the HPE Networking Support Portal (networkingsupport.hpe.com).","status":"open","published_at":"2026-11-03T20:18:21+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","triaged_at":"2026-11-03T20:49:51+00:00","updated_at":"2026-11-03T20:58:03+00:00","category":"infrastructure","confidence":0.9,"triage":{"at":"2026-11-03T20:49:51Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"HPE Networking Fabric Composer: local privilege escalation on underlying host OS","impact":"high","summary":"A local attacker who already holds high privileges on HPE Networking Fabric Composer can escalate to elevated privileges on the underlying host operating system. The sources give no further detail on the flaw or affected versions.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","networking","fabric-composer"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local attacker gains elevated rights on the host operating system","analyst_note":"Find the affected and fixed versions and the HPE advisory for CVE-2026-95737 at the NVD link.","how_to_check":"- Check whether HPE Networking Fabric Composer is deployed in your environment, and note its version\n- unknown for the affected version ranges; the sources do not say","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run HPE Networking Fabric Composer, where local accounts already hold high privileges. The sources do not list affected versions or configurations. unknown for who can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00064,"input_tokens":4099,"output_tokens":460,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected and fixed versions and the HPE advisory for CVE-2026-95737 at the NVD link.","search":"'-2026':13A,16A '-95737':14A,17A 'affect':68B 'allow':88C 'alreadi':38B 'attack':36B,91C 'compos':4A,24B,46B,84C 'composer':21A 'could':87C 'cve':12A,15A 'detail':63B 'elev':50B,97C 'escal':7A,30B,48B,72C 'exist':74C 'exploit':86C 'fabric':3A,20A,23B,45B,83C 'fabric-compos':22B 'flaw':66B 'gain':96C 'give':60B 'high':40B,93C 'hold':39B 'host':10A,33B,55B,102C 'hpe':1A,18A,25B,43B,81C 'infrastructur':26B 'local':5A,35B,90C 'network':2A,27B,44B,82C 'networking':19A 'oper':56B,78C,103C 'os':11A 'privileg':6A,29B,41B,51B,71C,94C,98C 'privilege-escal':28B 'self':32B 'self-host':31B 'sourc':59B 'success':85C 'system':57B,79C,104C 'under':9A,54B,77C,101C 'version':69B 'vulner':73C","nicknames":[],"mitigations":[],"who_affected":"Anyone running HPE Networking Fabric Composer 7.4.0 or earlier, or 7.3.4 or earlier. The attacker must already be local with high privileges, and can then gain elevated privileges on the host operating system, so risk is highest where several admins or other people have shell access to the appliance. Teams not running Fabric Composer can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-03T20:58:03Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1548},"products":{"at":"2026-11-03T20:58:03Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1548},"workarounds":{"at":"2026-11-03T20:58:03Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1548},"how_to_check":{"at":"2026-11-03T20:58:03Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1548},"who_affected":{"at":"2026-11-03T20:58:03Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1548}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["hpenetworkingfabriccomposer","networkingfabriccomposer"],"ptokens":["composer","fabric","hpe","networking"],"labels":["fabriccomposer","high","hpe","infrastructure","networking","privilegeescalation","selfhosted"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95737","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95737","severity":null,"published_at":"2026-11-03T20:18:21+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","fetched_at":"2026-11-03T20:49:25+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95737:1548","url":null,"severity":null,"published_at":"2026-11-03T20:58:03+00:00","modified_at":"2026-11-03T20:58:03+00:00","first_seen_at":"2026-11-03T20:58:03+00:00","fetched_at":"2026-11-03T20:58:03+00:00","note":"Read HPE advisory HPESBNW05172 (2026-11-03): CVE-2026-95737 local privesc on host OS, CVSS 8.2 High, AV:L PR:H. Affected 7.4.0 and below / 7.3.4 and below; fixed 7.4.1 / 7.3.5. HPE found it internally, no known public exploit. Advisory gives no specific workaround for this CVE beyond the general management-interface restriction."}],"documents":[{"id":60639,"url":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","title":"HPESBNW05172 rev.1 - Multiple Vulnerabilities in HPE Networking Fabric Composer (AFC)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}