{"id":"CVE-2026-95746","kind":"vulnerability","aliases":["CVE-2026-95746"],"related":[],"title":"HPE Networking Fabric Composer: API authentication bypass lets unauthenticated adjacent attackers in","description":"An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.","summary":"HPE Networking Fabric Composer has an authentication bypass in its API endpoint. An unauthenticated attacker on an adjacent network can get past login controls and reach the system without credentials, when certain preconditions outside their control are met.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["adjacent-network","api","fabric-composer","hpe","infrastructure","networking"],"not_affected_if":["unknown"],"how_to_check":"unknown: check the installed Fabric Composer version in the UI and compare with HPE's Nov 3 2026 bulletin once published; the bulletin is not yet readable. Also check whether the API is reachable from adjacent network segments.","fix":null,"status":"open","published_at":"2026-11-03T20:18:23+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","triaged_at":"2026-11-03T20:50:08+00:00","updated_at":"2026-11-03T20:55:06+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-03T20:50:08Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Networking Fabric Composer: API authentication bypass lets unauthenticated adjacent attackers in","impact":"high","summary":"HPE Networking Fabric Composer has an authentication bypass in its API endpoint. An unauthenticated attacker on an adjacent network can get past login controls and reach the system without credentials, when certain preconditions outside their control are met.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","networking","fabric-composer","api"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Unauthorized access to the affected system without credentials","analyst_note":"Find the affected and fixed HPE Fabric Composer versions and the preconditions in HPE's security bulletin for CVE-2026-95746.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organizations running HPE Networking Fabric Composer whose API endpoint is reachable from an adjacent network segment. The sources do not name the affected versions or the exact preconditions, so the exposure cannot be confirmed from them.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000645,"input_tokens":4135,"output_tokens":463,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the affected and fixed HPE Fabric Composer versions and the preconditions in HPE's security bulletin for CVE-2026-95746.","search":"'-2026':13A,16A '-95746':14A,17A 'access':110C 'adjac':10A,19B,45B,83C 'adjacent-network':18B 'affect':113C 'allow':80C,104C 'api':5A,21B,38B,72C 'attack':11A,42B,84C,96C,106C 'authent':6A,34B,67C,88C 'bypass':7A,35B,68C 'certain':59B,91C 'circumv':86C 'compos':4A,24B,31B,78C 'control':51B,63B,89C,98C 'could':79C,103C 'credenti':57B 'cve':12A,15A 'endpoint':39B,73C 'exist':87C 'exploit':102C 'fabric':3A,23B,30B,77C 'fabric-compos':22B 'gain':108C 'get':48B 'hpe':1A,25B,28B,75C 'infrastructur':26B 'let':8A 'login':50B 'met':65B,100C 'network':2A,20B,27B,29B,46B,76C 'outsid':61B,93C 'past':49B 'precondit':60B,92C 'reach':53B 'success':101C 'system':55B,114C 'unauthent':9A,41B,82C 'unauthor':109C 'vulner':69C 'without':56B","nicknames":[],"mitigations":[],"who_affected":"Teams running HPE Networking Fabric Composer whose API is reachable from an adjacent network segment. HPE's CVE text says exploitation needs preconditions outside the attacker's control, and CVSS rates attack complexity High. Affected versions and the fix are not confirmed from a primary page yet.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["adjacentnetwork","api","fabriccomposer","high","hpe","infrastructure","networking"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:23+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95746","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95746","severity":null,"published_at":"2026-11-03T20:18:23+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:25+00:00","fetched_at":"2026-11-03T20:49:25+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95746:1540","url":null,"severity":null,"published_at":"2026-11-03T20:55:06+00:00","modified_at":"2026-11-03T20:55:06+00:00","first_seen_at":"2026-11-03T20:55:06+00:00","fetched_at":"2026-11-03T20:55:06+00:00","note":"HPE's Nov 3 2026 bulletin for this CVE is not indexed yet; only advance notice HPESBNW05166 (no versions) found. Sibling Sep 1 bulletin HPESBNW05133 fixed 7.3.4/7.4.0 for different CVEs; not applied here. Versions, fix and preconditions unknown until the bulletin is readable; revisit."}],"documents":[{"id":60648,"url":"https://networkingsupport.hpe.com/notification/security","title":"HPE Networking Security Alerts & Advisories (lists HPESBNW05166 advance notice for Nov 3, 2026: VIA, Fabric Composer)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":60649,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95746","title":"NVD CVE-2026-95746","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}