Live › vulnerability › CVE-2026-95751
HPE Networking Fabric Composer's API does not properly validate certificates, so an attacker can get past existing authentication controls. Successful exploitation gives unauthorized access to the affected system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Organisations running HPE Networking Fabric Composer with its API reachable. The sources say exploitation needs certain preconditions outside the attacker's control, but do not name them. unknown
No product ranges from the sources yet.
7.3.3 and below, but it does not list this CVENo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.
This page as .md · .json · in your agent: get_signal("CVE-2026-95751")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.