---
id: "CVE-2026-95764"
kind: "vulnerability"
aliases: ["CVE-2026-95764"]
title: "HPE Networking Fabric Composer: API certificate validation flaw exposes sensitive information"
severity: "medium"
cvss: 5.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["hpe", "infrastructure", "network-management", "networking-fabric-composer"]
not_affected_if: ["unknown"]
published_at: "2026-11-03T20:18:25+00:00"
first_seen_at: "2026-11-03T20:49:26+00:00"
updated_at: "2026-11-03T20:51:42+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95764", "first_seen_at": "2026-11-03T20:49:26+00:00"}]
---

# HPE Networking Fabric Composer: API certificate validation flaw exposes sensitive information

HPE Networking Fabric Composer's API does not properly validate certificates. An unauthenticated attacker on an adjacent network can use this to access sensitive information.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-03T20:49:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95764

## From the sources

An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to access sensitive information.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_