Live › vulnerability › CVE-2026-95755
HPE Networking Fabric Composer does not properly validate certificates on an affected interface. An unauthenticated attacker on an adjacent network can intercept management traffic and obtain sensitive information when certain preconditions outside their control are met.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Organizations running HPE Networking Fabric Composer whose management interface carries traffic that an adjacent-network attacker could reach. The sources do not describe the exact affected interface or versions, and do not say which configurations are needed for the preconditions to hold. Teams not running HPE Networking Fabric Composer can skip it.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper certificate validation vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept management traffic if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain sensitive information.
This page as .md · .json · in your agent: get_signal("CVE-2026-95755")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.