Live › vulnerability › CVE-2026-95740
HPE Networking Fabric Composer does not properly validate certificates, so an unauthenticated attacker on an adjacent network can intercept communications between the system and remote servers when certain outside conditions hold. Successful interception could expose sensitive information.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Organizations running HPE Networking Fabric Composer whose system communicates with remote servers over a network an attacker could reach. The sources say exploitation depends on preconditions outside the attacker's control, but do not name them. Teams not running this product can skip it.
No product ranges from the sources yet.
7.3.3 and below, but it is not confirmed to cover this CVENo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept communications between the affected system and remote servers if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain sensitive information.
This page as .md · .json · in your agent: get_signal("CVE-2026-95740")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.