{"id":"CVE-2026-95738","kind":"vulnerability","aliases":["CVE-2026-95738"],"related":[],"title":"HPE Networking Fabric Composer: remote authentication bypass can give admin access (fixed in 7.3.5 and 7.4.1)","description":"Authentication bypass vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain administrative access to the affected system.","summary":"HPE Networking Fabric Composer has authentication bypass flaws in an affected interface. An unauthenticated remote attacker who meets certain preconditions outside their control can get past login and reach administrative access.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Fabric Composer","fixed":["7.3.5","7.4.1"],"affected":"<= 7.3.4 (7.3.x); <= 7.4.0 (7.4.x)","ecosystem":"vendor"}],"ecosystems":[],"tags":["authentication-bypass","fabric-composer","hpe","infrastructure","networking","self-hosted"],"not_affected_if":["management-interface-isolated","unknown"],"how_to_check":"Check the installed Fabric Composer version: 7.4.0 and below, or 7.3.4 and below, is affected; fixed is 7.4.1+ / 7.3.5+. Also check whether the CLI and web management interfaces are reachable from untrusted networks.","fix":"Upgrade HPE Networking Fabric Composer to 7.4.1 or later (7.4.x branch) or 7.3.5 or later (7.3.x branch); download from the HPE Networking Support Portal. Workaround from HPE: restrict the CLI and web management interfaces to a dedicated layer 2 segment/VLAN and/or control them with layer 3+ firewall policies, with accounting controls.","status":"open","published_at":"2026-11-03T20:18:22+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","triaged_at":"2026-11-03T20:49:54+00:00","updated_at":"2026-11-03T20:58:38+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-03T20:49:54Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Networking Fabric Composer: authentication bypass lets remote attackers gain admin access","impact":"high","summary":"HPE Networking Fabric Composer has authentication bypass flaws in an affected interface. An unauthenticated remote attacker who meets certain preconditions outside their control can get past login and reach administrative access.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","fabric-composer","networking"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Unauthenticated attacker gains administrative control of the networking management system","analyst_note":"Find the HPE security bulletin for CVE-2026-95738 to get affected versions, the preconditions, the fixed release, and any workaround.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organizations running HPE Networking Fabric Composer with the affected interface reachable over the network. The sources do not name the affected versions or the exact preconditions, so the exposure depends on those details from the vendor advisory.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000637,"input_tokens":4133,"output_tokens":448,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the HPE security bulletin for CVE-2026-95738 to get affected versions, the preconditions, the fixed release, and any workaround.","search":"'-2026':18A,21A '-95738':19A,22A '7.3.5':14A '7.4.1':16A 'access':11A,67B,111C 'admin':10A 'administr':66B,110C 'affect':47B,73C,114C 'allow':81C,105C 'attack':52B,85C,97C,107C 'authent':6A,26B,42B,68C,89C 'authentication-bypass':25B 'bypass':7A,27B,43B,69C 'certain':55B,92C 'circumv':87C 'compos':4A,30B,40B,79C 'composer':24A 'control':59B,90C,99C 'could':80C,104C 'cve':17A,20A 'exist':88C 'exploit':103C 'fabric':3A,23A,29B,39B,78C 'fabric-compos':28B 'fix':12A 'flaw':44B 'gain':109C 'get':61B 'give':9A 'host':36B 'hpe':1A,31B,37B,76C 'infrastructur':32B 'interfac':48B,74C 'login':63B 'meet':54B 'met':101C 'network':2A,33B,38B,77C 'outsid':57B,94C 'past':62B 'precondit':56B,93C 'reach':65B 'remot':5A,51B,84C 'self':35B 'self-host':34B 'success':102C 'system':115C 'unauthent':50B,83C 'vulner':70C","nicknames":[],"mitigations":[],"who_affected":"Anyone running HPE Networking Fabric Composer 7.4.0 or earlier, or 7.3.4 or earlier, whose management interfaces can be reached over the network. HPE does not name the affected interface or the preconditions (it says only that they are outside the attacker's control, hence high attack complexity). Deployments with management restricted to a dedicated segment or firewalled are less exposed but should still patch; unsupported (EoM/EoS) versions are presumed affected.","tier":"B","verified":{"fix":{"at":"2026-11-03T20:58:38Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1547},"products":{"at":"2026-11-03T20:58:38Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1547},"who_affected":{"at":"2026-11-03T20:58:38Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1547}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["composer","fabriccomposer"],"ptokens":["composer","fabric"],"labels":["authenticationbypass","fabriccomposer","high","hpe","infrastructure","networking","selfhosted"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95738","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95738","severity":null,"published_at":"2026-11-03T20:18:22+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","fetched_at":"2026-11-03T20:49:25+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95738:1547","url":null,"severity":null,"published_at":"2026-11-03T20:58:38+00:00","modified_at":"2026-11-03T20:58:38+00:00","first_seen_at":"2026-11-03T20:58:38+00:00","fetched_at":"2026-11-03T20:58:38+00:00","note":"Read HPESBNW05172 (HPE, 2026-Nov-03): CVE-2026-95738 CVSS 8.1, remote unauth auth bypass, preconditions unspecified. Affected <=7.3.4 / <=7.4.0, fixed 7.3.5 / 7.4.1. HPE says no known public exploit or discussion. No vendor-side mitigations beyond the management-interface restriction workaround. Sept bulletin HPESBNW05133 covers different CVEs."}],"documents":[{"id":60639,"url":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","title":"HPESBNW05172 rev.1 - Multiple Vulnerabilities in HPE Networking Fabric Composer (AFC)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}