---
id: "CVE-2026-95763"
kind: "vulnerability"
aliases: ["CVE-2026-95763"]
title: "HPE Networking Fabric Composer: certificate check flaw exposes transferred files and credentials"
severity: "medium"
cvss: 5.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["fabric-composer", "hpe", "infrastructure", "networking"]
not_affected_if: ["product-not-deployed"]
published_at: "2026-11-03T20:18:25+00:00"
first_seen_at: "2026-11-03T20:49:26+00:00"
updated_at: "2026-11-03T20:50:34+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95763", "first_seen_at": "2026-11-03T20:49:26+00:00"}]
---

# HPE Networking Fabric Composer: certificate check flaw exposes transferred files and credentials

HPE Networking Fabric Composer does not properly validate certificates, so a network attacker can intercept files it transfers. Stored credentials for remote servers can also be exposed to that attacker.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-03T20:49:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95763

## From the sources

An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept transferred files and the stored credentials for remote servers.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_