{"id":"CVE-2026-95766","kind":"vulnerability","aliases":["CVE-2026-95766"],"related":[],"title":"HPE Networking Fabric Composer: sensitive data disclosure to low-privilege accounts","description":"Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information.","summary":"HPE Networking Fabric Composer has sensitive information disclosure flaws. An attacker with a low-privilege account can read sensitive information the product should not expose.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["hpe","infrastructure","networking-fabric-composer"],"not_affected_if":["product-not-deployed"],"how_to_check":"- Confirm whether HPE Networking Fabric Composer is deployed in your environment.\n- Check the installed version against the vendor advisory: unknown","fix":null,"status":"open","published_at":"2026-11-03T20:18:25+00:00","first_seen_at":"2026-11-03T20:49:27+00:00","triaged_at":"2026-11-03T20:51:50+00:00","updated_at":"2026-11-03T20:51:50+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-03T20:51:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Networking Fabric Composer: sensitive data disclosure to low-privilege accounts","impact":"low","summary":"HPE Networking Fabric Composer has sensitive information disclosure flaws. An attacker with a low-privilege account can read sensitive information the product should not expose.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","networking-fabric-composer"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Authenticated low-privilege user reads sensitive information from the product","analyst_note":"Find the HPE advisory for affected and fixed versions and the specific data exposed.","how_to_check":"- Confirm whether HPE Networking Fabric Composer is deployed in your environment.\n- Check the installed version against the vendor advisory: unknown","plain_action":"","needs_analyst":true,"not_affected_if":["product-not-deployed"],"who_is_affected":"Organizations running HPE Networking Fabric Composer where low-privilege accounts exist. The sources do not state the affected versions or the specific data exposed. Teams without this product can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000638,"input_tokens":4107,"output_tokens":455,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-95766':15A,18A 'access':69C 'account':12A,41B 'allow':61C,75C 'attack':35B,64C,77C 'authent':63C 'compos':4A,24B,28B,59C 'could':60C,74C 'cve':13A,16A 'data':6A 'disclos':79C 'disclosur':7A,32B,53C 'exploit':73C 'expos':50B 'fabric':3A,23B,27B,58C 'flaw':33B 'hpe':1A,19B,25B,56C 'inform':31B,45B,52C,71C,81C 'infrastructur':20B 'low':10A,39B,66C 'low-privileg':9A,38B 'network':2A,22B,26B,57C 'networking-fabric-compos':21B 'privileg':11A,40B,67C 'product':47B 'read':43B 'sensit':5A,30B,44B,51C,70C,80C 'success':72C 'vulner':54C","nicknames":[],"mitigations":[],"who_affected":"Organizations running HPE Networking Fabric Composer where low-privilege accounts exist. The sources do not state the affected versions or the specific data exposed. Teams without this product can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["hpe","infrastructure","medium","networkingfabriccomposer"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:25+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95766","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95766","severity":null,"published_at":"2026-11-03T20:18:25+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:27+00:00","fetched_at":"2026-11-03T20:49:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}