Live › vulnerability › CVE-2026-95746
HPE Networking Fabric Composer has an authentication bypass in its API endpoint. An unauthenticated attacker on an adjacent network can get past login controls and reach the system without credentials, when certain preconditions outside their control are met.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Teams running HPE Networking Fabric Composer whose API is reachable from an adjacent network segment. HPE's CVE text says exploitation needs preconditions outside the attacker's control, and CVSS rates attack complexity High. Affected versions and the fix are not confirmed from a primary page yet.
No product ranges from the sources yet.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.
This page as .md · .json · in your agent: get_signal("CVE-2026-95746")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.