{"id":"CVE-2026-95751","kind":"vulnerability","aliases":["CVE-2026-95751"],"related":[],"title":"HPE Networking Fabric Composer: API certificate check flaw lets attackers bypass login","description":"An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.","summary":"HPE Networking Fabric Composer's API does not properly validate certificates, so an attacker can get past existing authentication controls. Successful exploitation gives unauthorized access to the affected system.","severity":"high","cvss":7.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["api","auth-bypass","hpe-networking-fabric-composer","infrastructure","unauthenticated"],"not_affected_if":[],"how_to_check":"Unknown: HPE's advisory for this CVE was not found. Check your Fabric Composer version in the UI/About page and compare with the HPE advisory once published; the earlier advisory HPESBNW05133 covered 7.3.3 and below, but it does not list this CVE.","fix":null,"status":"open","published_at":"2026-11-03T20:18:23+00:00","first_seen_at":"2026-11-03T20:49:26+00:00","triaged_at":"2026-11-03T20:50:14+00:00","updated_at":"2026-11-03T20:53:01+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-03T20:50:14Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Networking Fabric Composer: API certificate check flaw lets attackers bypass login","impact":"high","summary":"HPE Networking Fabric Composer's API does not properly validate certificates, so an attacker can get past existing authentication controls. Successful exploitation gives unauthorized access to the affected system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe-networking-fabric-composer","api"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker gains unauthorized access to the Fabric Composer system","analyst_note":"Check the HPE security bulletin for affected versions, fixed versions, and the exact certificate validation preconditions; source given is only NVD.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organisations running HPE Networking Fabric Composer with its API reachable. The sources say exploitation needs certain preconditions outside the attacker's control, but do not name them. unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000626,"input_tokens":4127,"output_tokens":426,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the HPE security bulletin for affected versions, fixed versions, and the exact certificate validation preconditions; source given is only NVD.","search":"'-2026':14A,17A '-95751':15A,18A 'access':54B,103C 'affect':57B,106C 'allow':73C,97C 'api':5A,19B,35B,66C 'attack':10A,43B,77C,89C,99C 'auth':21B 'auth-bypass':20B 'authent':48B,81C 'bypass':11A,22B 'certain':84C 'certif':6A,40B,61C 'check':7A 'circumv':79C 'compos':4A,27B,33B,71C 'control':49B,82C,91C 'could':72C,96C 'cve':13A,16A 'exist':47B,80C 'exploit':51B,95C 'fabric':3A,26B,32B,70C 'flaw':8A 'gain':101C 'get':45B 'give':52B 'hpe':1A,24B,30B,68C 'hpe-networking-fabric-compos':23B 'improp':60C 'infrastructur':28B 'let':9A 'login':12A 'met':93C 'network':2A,25B,31B,69C 'outsid':86C 'past':46B 'precondit':85C 'proper':38B 'remot':76C 'success':50B,94C 'system':58B,107C 'unauthent':29B,75C 'unauthor':53B,102C 'valid':39B,62C 'vulner':63C","nicknames":[],"mitigations":[],"who_affected":"Organisations running HPE Networking Fabric Composer with its API reachable. The sources say exploitation needs certain preconditions outside the attacker's control, but do not name them. unknown","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["api","authbypass","high","hpenetworkingfabriccomposer","infrastructure","unauthenticated"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:23+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95751","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95751","severity":null,"published_at":"2026-11-03T20:18:23+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:26+00:00","fetched_at":"2026-11-03T20:49:26+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95751:1535","url":null,"severity":null,"published_at":"2026-11-03T20:53:01+00:00","modified_at":"2026-11-03T20:53:01+00:00","first_seen_at":"2026-11-03T20:53:01+00:00","fetched_at":"2026-11-03T20:53:01+00:00","note":"HPE's per-CVE bulletin for this Nov 3 batch not found (web search, guessed CSAF URLs 05166-05169 empty). Sept advisory HPESBNW05133 (7.3.3 and below; fixed 7.3.4 / 7.4.0) does NOT list this CVE, so I did not apply its versions. Only the HPE advance notice (no CVE detail) is linked as mentions. Nothing verified. Revisit when the HPE advisory (likely HPESBNW05167+) is indexed."}],"documents":[{"id":60637,"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05166en_us&docLocale=en_US","title":"HPESBNW05166 rev.1 - HPE Networking Advance Notification of Security Advisories for November 03, 2026","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}