{"id":"CVE-2026-95757","kind":"vulnerability","aliases":["CVE-2026-95757"],"related":[],"title":"HPE Networking Fabric Composer: local API auth bypass lets low-privilege users write files","description":"A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with low privileges to write arbitrary files to remote servers configured on the affected system.","summary":"A local authentication bypass in an API of HPE Networking Fabric Composer lets an attacker with low privileges on the system bypass authentication. A successful attack can write arbitrary files to remote servers configured on the affected system.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["fabric-composer","hpe","infrastructure","networking"],"not_affected_if":["no-fabric-composer"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-03T20:18:24+00:00","first_seen_at":"2026-11-03T20:49:26+00:00","triaged_at":"2026-11-03T20:50:29+00:00","updated_at":"2026-11-03T20:50:29+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-03T20:50:29Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"HPE Networking Fabric Composer: local API auth bypass lets low-privilege users write files","impact":"medium","summary":"A local authentication bypass in an API of HPE Networking Fabric Composer lets an attacker with low privileges on the system bypass authentication. A successful attack can write arbitrary files to remote servers configured on the affected system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","fabric-composer","networking"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Low-privilege local user writes arbitrary files to configured remote servers","analyst_note":"Find HPE's advisory for CVE-2026-95757 to confirm affected versions, fixed versions and the vulnerable API.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-fabric-composer"],"who_is_affected":"The sources only describe a local attacker with low privileges on a system running HPE Networking Fabric Composer, with the write reaching remote servers configured on that system. Affected versions, the API involved and default configuration are not stated. Teams that do not run HPE Networking Fabric Composer can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000649,"input_tokens":4094,"output_tokens":480,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':17A,20A '-95757':18A,21A 'affect':64B,100C 'allow':83C 'api':6A,34B,74C 'arbitrari':56B,92C 'attack':42B,53B,86C 'auth':7A 'authent':30B,50B,68C 'bypass':8A,31B,49B,69C 'compos':4A,24B,39B,79C 'configur':61B,97C 'could':82C 'cve':16A,19A 'exist':71C 'exploit':81C 'fabric':3A,23B,38B,78C 'fabric-compos':22B 'file':15A,57B,93C 'hpe':1A,25B,36B,76C 'infrastructur':26B 'let':9A,40B 'local':5A,29B,67C,85C 'low':11A,44B,88C 'low-privileg':10A 'network':2A,27B,37B,77C 'privileg':12A,45B,89C 'remot':59B,95C 'server':60B,96C 'success':52B,80C 'system':48B,65B,101C 'user':13A 'vulner':70C 'write':14A,55B,91C","nicknames":[],"mitigations":[],"who_affected":"The sources only describe a local attacker with low privileges on a system running HPE Networking Fabric Composer, with the write reaching remote servers configured on that system. Affected versions, the API involved and default configuration are not stated. Teams that do not run HPE Networking Fabric Composer can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["fabriccomposer","hpe","infrastructure","medium","networking"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95757","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95757","severity":null,"published_at":"2026-11-03T20:18:24+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:26+00:00","fetched_at":"2026-11-03T20:49:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}