Live › vulnerability › CVE-2026-95757
A local authentication bypass in an API of HPE Networking Fabric Composer lets an attacker with low privileges on the system bypass authentication. A successful attack can write arbitrary files to remote servers configured on the affected system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
The sources only describe a local attacker with low privileges on a system running HPE Networking Fabric Composer, with the write reaching remote servers configured on that system. Affected versions, the API involved and default configuration are not stated. Teams that do not run HPE Networking Fabric Composer can skip it.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with low privileges to write arbitrary files to remote servers configured on the affected system.
This page as .md · .json · in your agent: get_signal("CVE-2026-95757")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.