{"id":"CVE-2026-95759","kind":"vulnerability","aliases":["CVE-2026-95759"],"related":[],"title":"HPE Networking Fabric Composer: API flaw lets users hide their audit records","description":"Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.","summary":"HPE Networking Fabric Composer has audit log bypass flaws in its API. An authenticated attacker with low privileges can suppress audit records of their own activity on the affected system.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["audit-logging","fabric-composer","hpe","infrastructure","networking"],"not_affected_if":["product-not-deployed"],"how_to_check":"- Confirm whether HPE Networking Fabric Composer is deployed in your environment, and which version is running.\n- Check the product's release notes or HPE advisory for the affected version ranges: unknown from the sources.","fix":null,"status":"open","published_at":"2026-11-03T20:18:24+00:00","first_seen_at":"2026-11-03T20:49:26+00:00","triaged_at":"2026-11-03T20:50:26+00:00","updated_at":"2026-11-03T20:50:26+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-03T20:50:26Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Networking Fabric Composer: API flaw lets users hide their audit records","impact":"low","summary":"HPE Networking Fabric Composer has audit log bypass flaws in its API. An authenticated attacker with low privileges can suppress audit records of their own activity on the affected system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","networking","fabric-composer","audit-logging"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"authenticated user hides their own activity from audit logs","analyst_note":"Find HPE's advisory for affected and fixed versions of Fabric Composer; the NVD entry alone gives no ranges.","how_to_check":"- Confirm whether HPE Networking Fabric Composer is deployed in your environment, and which version is running.\n- Check the product's release notes or HPE advisory for the affected version ranges: unknown from the sources.","plain_action":"","needs_analyst":true,"not_affected_if":["product-not-deployed"],"who_is_affected":"Teams that run HPE Networking Fabric Composer and expose its API to users with low-privilege accounts. The sources do not list affected version ranges or configuration details, so exposure is unknown. Teams not running this product can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000662,"input_tokens":4096,"output_tokens":504,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-95759':15A,18A 'activ':53B,88C 'affect':56B,91C 'allow':74C 'api':5A,39B,65C 'attack':42B,77C 'audit':11A,20B,33B,48B,58C,84C 'audit-log':19B 'authent':41B,76C 'bypass':35B,60C 'compos':4A,24B,31B,70C 'could':73C 'cve':13A,16A 'exist':62C 'exploit':72C 'fabric':3A,23B,30B,69C 'fabric-compos':22B 'flaw':6A,36B 'hide':9A 'hpe':1A,25B,28B,67C 'infrastructur':26B 'let':7A 'log':21B,34B,59C 'low':44B,79C 'network':2A,27B,29B,68C 'privileg':45B,80C 'record':12A,49B,85C 'success':71C 'suppress':47B,82C 'system':57B,92C 'user':8A 'vulner':61C","nicknames":[],"mitigations":[],"who_affected":"Teams that run HPE Networking Fabric Composer and expose its API to users with low-privilege accounts. The sources do not list affected version ranges or configuration details, so exposure is unknown. Teams not running this product can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["auditlogging","fabriccomposer","hpe","infrastructure","medium","networking"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95759","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95759","severity":null,"published_at":"2026-11-03T20:18:24+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:26+00:00","fetched_at":"2026-11-03T20:49:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}