{"id":"CVE-2026-95742","kind":"vulnerability","aliases":["CVE-2026-95742"],"related":[],"title":"HPE Networking Fabric Composer: local users can overwrite arbitrary system files","description":"An arbitrary file write vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated local attacker to create or overwrite arbitrary files on the affected system with elevated privileges.","summary":"An arbitrary file write flaw exists in the operating system underneath HPE Networking Fabric Composer. An authenticated local attacker can create or overwrite files on the system with elevated privileges.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["fabric-composer","hpe","infrastructure","local-privilege","networking-fabric-composer","on-prem","operating-system"],"not_affected_if":["unknown"],"how_to_check":"Unknown until HPE publishes the bulletin for CVE-2026-95742. Check your Fabric Composer version; HPE's Sep 2026 bulletin HPESBNW05133 fixed other flaws in 7.3.4 and 7.4.0, so 7.3.3 and earlier are at least exposed to those. Whether those releases also fix this CVE is not confirmed.","fix":null,"status":"open","published_at":"2026-11-03T20:18:22+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","triaged_at":"2026-11-03T20:50:00+00:00","updated_at":"2026-11-03T20:56:19+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-03T20:50:00Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"HPE Networking Fabric Composer: local users can overwrite arbitrary system files","impact":"high","summary":"An arbitrary file write flaw exists in the operating system underneath HPE Networking Fabric Composer. An authenticated local attacker can create or overwrite files on the system with elevated privileges.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","networking-fabric-composer","operating-system"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker writes or overwrites system files with elevated privileges","analyst_note":"Find HPE's security bulletin for affected and fixed Fabric Composer versions and the mitigation, since the NVD entry gives neither.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"The flaw is in the operating system layer of HPE Networking Fabric Composer, so any deployment of that product is in scope. Exploitation requires a local account on the affected system. The sources do not name affected versions or configurations.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000632,"input_tokens":4107,"output_tokens":443,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find HPE's security bulletin for affected and fixed Fabric Composer versions and the mitigation, since the NVD entry gives neither.","search":"'-2026':13A,16A '-95742':14A,17A 'affect':98C 'allow':85C 'arbitrari':9A,37B,67C,94C 'attack':54B,89C 'authent':52B,87C 'compos':4A,20B,29B,50B,81C 'could':84C 'creat':56B,91C 'cve':12A,15A 'elev':64B,101C 'exist':41B,71C 'exploit':83C 'fabric':3A,19B,28B,49B,80C 'fabric-compos':18B 'file':11A,38B,59B,68C,95C 'flaw':40B 'hpe':1A,21B,47B,78C 'infrastructur':22B 'local':5A,24B,53B,88C 'local-privileg':23B 'network':2A,27B,48B,79C 'networking-fabric-compos':26B 'on-prem':30B 'oper':34B,44B,75C 'operating-system':33B 'overwrit':8A,58B,93C 'prem':32B 'privileg':25B,65B,102C 'success':82C 'system':10A,35B,45B,62B,76C,99C 'under':74C 'underneath':46B 'user':6A 'vulner':70C 'write':39B,69C","nicknames":[],"mitigations":[],"who_affected":"The flaw is in the operating system layer of HPE Networking Fabric Composer, so any deployment of that product is in scope. Exploitation requires a local account on the affected system. The sources do not name affected versions or configurations.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["fabriccomposer","high","hpe","infrastructure","localprivilege","networkingfabriccomposer","onprem","operatingsystem"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95742","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95742","severity":null,"published_at":"2026-11-03T20:18:22+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","fetched_at":"2026-11-03T20:49:25+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95742:1543","url":null,"severity":null,"published_at":"2026-11-03T20:56:19+00:00","modified_at":"2026-11-03T20:56:19+00:00","first_seen_at":"2026-11-03T20:56:19+00:00","fetched_at":"2026-11-03T20:56:19+00:00","note":"No HPE bulletin for this CVE found yet. HPE's list shows HPESBNW05166, an advance notice of Nov 3 2026 advisories covering Fabric Composer and VIA, so the real bulletin is probably imminent; I could not fetch its text. The Sep 1 bulletin HPESBNW05133 (fixes 7.3.4 / 7.4.0) covers a different set of CVEs, and I did not see this one in the portion I could read (the page was truncated). Affected and fixed versions are unknown and unverified. Re-check once the Nov 3 bulletin is up. x-cli not used."}],"documents":[{"id":60648,"url":"https://networkingsupport.hpe.com/notification/security","title":"HPE Networking Security Alerts & Advisories (lists HPESBNW05166 advance notice for Nov 3, 2026: VIA, Fabric Composer)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":60632,"url":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05133.txt","title":"HPESBNW05133 Multiple Vulnerabilities in HPE Networking Fabric Composer (Sep 2026, earlier bulletin; does not list CVE-2026-95742 in the part I could read)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}