Live › vulnerability › CVE-2026-95744
HPE Networking Fabric Composer has a sensitive information disclosure flaw in an affected interface. An authenticated low-privileged attacker can read sensitive data and may intercept protected network traffic when certain conditions outside their control are met.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Teams running HPE Networking Fabric Composer, the network-fabric management platform, may be exposed. The flaw needs an authenticated low-privileged account and conditions the attacker does not control, and could let them intercept protected network traffic. HPE's bulletin for this CVE was not available when this was written, so the affected versions and interface are unconfirmed. Deployments without Fabric Composer can skip it.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A sensitive information disclosure vulnerability in the affected interface of HPE Networking Fabric Composer could allow an authenticated low-privileged attacker to access sensitive information, if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept protected network traffic.
This page as .md · .json · in your agent: get_signal("CVE-2026-95744")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.