---
id: "CVE-2026-95758"
kind: "vulnerability"
aliases: ["CVE-2026-95758"]
title: "HPE Networking Fabric Composer: API authorization bypass lets users change protected resources"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["fabric-composer", "hpe", "infrastructure", "networking"]
not_affected_if: ["unknown"]
published_at: "2026-11-03T20:18:24+00:00"
first_seen_at: "2026-11-03T20:49:26+00:00"
updated_at: "2026-11-03T20:50:27+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95758", "first_seen_at": "2026-11-03T20:49:26+00:00"}]
---

# HPE Networking Fabric Composer: API authorization bypass lets users change protected resources

HPE Networking Fabric Composer has an authorization bypass in its API. An authenticated attacker can get around security restrictions and modify resources they should not be able to change.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-03T20:49:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95758

## From the sources

An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker to bypass security restrictions and modify protected resources on the affected system.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_