Live › vulnerability › CVE-2026-95745
A flaw in the API of HPE Networking Fabric Composer lets a remote attacker with no login cause denial of service. A successful attack makes the management services unavailable.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Teams running HPE Networking Fabric Composer with its API reachable over the network are exposed to an unauthenticated denial of service (CVSS 7.5, availability only, no data loss stated). HPE's bulletin for this CVE has not been found, so affected versions, fixed versions and API endpoints are unknown. Teams that keep the management interfaces on an isolated segment can lower the risk.
No product ranges from the sources yet.
7.3.4 and 7.4.0, but do not assume it covers this oneUnknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to cause the management services to become unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2026-95745")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.