---
id: "CVE-2026-95759"
kind: "vulnerability"
aliases: ["CVE-2026-95759"]
title: "HPE Networking Fabric Composer: API flaw lets users hide their audit records"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["audit-logging", "fabric-composer", "hpe", "infrastructure", "networking"]
not_affected_if: ["product-not-deployed"]
published_at: "2026-11-03T20:18:24+00:00"
first_seen_at: "2026-11-03T20:49:26+00:00"
updated_at: "2026-11-03T20:50:26+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95759", "first_seen_at": "2026-11-03T20:49:26+00:00"}]
---

# HPE Networking Fabric Composer: API flaw lets users hide their audit records

HPE Networking Fabric Composer has audit log bypass flaws in its API. An authenticated attacker with low privileges can suppress audit records of their own activity on the affected system.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm whether HPE Networking Fabric Composer is deployed in your environment, and which version is running.
- Check the product's release notes or HPE advisory for the affected version ranges: unknown from the sources.

## Timeline

- 2026-11-03T20:49:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95759

## From the sources

Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_