{"id":"CVE-2026-95740","kind":"vulnerability","aliases":["CVE-2026-95740"],"related":[],"title":"HPE Networking Fabric Composer: improper certificate checks let attackers intercept traffic","description":"An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept communications between the affected system and remote servers if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain sensitive information.","summary":"HPE Networking Fabric Composer does not properly validate certificates, so an unauthenticated attacker on an adjacent network can intercept communications between the system and remote servers when certain outside conditions hold. Successful interception could expose sensitive information.","severity":"high","cvss":8.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["fabric-composer","hpe","infrastructure","networking"],"not_affected_if":[],"how_to_check":"Unknown until HPE's bulletin is readable. Check your Fabric Composer version in the UI or CLI. The September bulletin HPESBNW05133 covered 7.3.3 and below, but it is not confirmed to cover this CVE.","fix":null,"status":"open","published_at":"2026-11-03T20:18:22+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","triaged_at":"2026-11-03T20:49:57+00:00","updated_at":"2026-11-03T20:58:03+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-03T20:49:57Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Networking Fabric Composer: improper certificate checks let attackers intercept traffic","impact":"medium","summary":"HPE Networking Fabric Composer does not properly validate certificates, so an unauthenticated attacker on an adjacent network can intercept communications between the system and remote servers when certain outside conditions hold. Successful interception could expose sensitive information.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","fabric-composer","networking"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker intercepts traffic and obtains sensitive information","analyst_note":"Check the HPE security bulletin and NVD entry for affected versions, fixed releases and the preconditions; source only gives NVD text.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running HPE Networking Fabric Composer whose system communicates with remote servers over a network an attacker could reach. The sources say exploitation depends on preconditions outside the attacker's control, but do not name them. Teams not running this product can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000645,"input_tokens":4128,"output_tokens":465,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the HPE security bulletin and NVD entry for affected versions, fixed releases and the preconditions; source only gives NVD text.","search":"'-2026':13A,16A '-95740':14A,17A 'adjac':39B,75C 'affect':82C 'allow':72C,101C 'attack':9A,36B,76C,93C,103C 'certain':51B,88C 'certif':6A,32B,63C 'check':7A 'communic':43B,79C 'compos':4A,20B,27B,70C 'condit':53B 'control':95C 'could':57B,71C,100C 'cve':12A,15A 'exploit':99C 'expos':58B 'fabric':3A,19B,26B,69C 'fabric-compos':18B 'hold':54B 'hpe':1A,21B,24B,67C 'improp':5A,62C 'inform':60B,107C 'infrastructur':22B 'intercept':10A,42B,56B,78C 'let':8A 'met':97C 'network':2A,23B,25B,40B,68C 'obtain':105C 'outsid':52B,90C 'precondit':89C 'proper':30B 'remot':48B,85C 'sensit':59B,106C 'server':49B,86C 'success':55B,98C 'system':46B,83C 'traffic':11A 'unauthent':35B,74C 'valid':31B,64C 'vulner':65C","nicknames":[],"mitigations":[],"who_affected":"Organizations running HPE Networking Fabric Composer whose system communicates with remote servers over a network an attacker could reach. The sources say exploitation depends on preconditions outside the attacker's control, but do not name them. Teams not running this product can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["fabriccomposer","high","hpe","infrastructure","networking"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95740","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95740","severity":null,"published_at":"2026-11-03T20:18:22+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","fetched_at":"2026-11-03T20:49:25+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95740:1545","url":null,"severity":null,"published_at":"2026-11-03T20:58:03+00:00","modified_at":"2026-11-03T20:58:03+00:00","first_seen_at":"2026-11-03T20:58:03+00:00","fetched_at":"2026-11-03T20:58:03+00:00","note":"HPE's advance notice HPESBNW05166 (Oct 27) lists Fabric Composer and VIA for Nov 3. I could not find the bulletin for this CVE: the cve.org page was empty and the CSAF text for 05166 returned nothing. Affected versions, fixed release and preconditions are unknown, so no product rows, fix or verified fields are written. Fix status 'none' on the record has no vendor page behind it. Settle it by reading the Nov 3 HPE bulletin, which should be on the csaf.arubanetworking.hpe.com/2026 index. No exploitation or PoC found. The September bulletin HPESBNW05133 covers other CVEs: fixed in 7.3.4 and 7.4.0."}],"documents":[{"id":60654,"url":"https://networkingsupport.hpe.com/notifications","title":"HPE Networking security alerts and notifications","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}