---
id: "CVE-2026-95766"
kind: "vulnerability"
aliases: ["CVE-2026-95766"]
title: "HPE Networking Fabric Composer: sensitive data disclosure to low-privilege accounts"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["hpe", "infrastructure", "networking-fabric-composer"]
not_affected_if: ["product-not-deployed"]
published_at: "2026-11-03T20:18:25+00:00"
first_seen_at: "2026-11-03T20:49:27+00:00"
updated_at: "2026-11-03T20:51:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95766", "first_seen_at": "2026-11-03T20:49:27+00:00"}]
---

# HPE Networking Fabric Composer: sensitive data disclosure to low-privilege accounts

HPE Networking Fabric Composer has sensitive information disclosure flaws. An attacker with a low-privilege account can read sensitive information the product should not expose.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm whether HPE Networking Fabric Composer is deployed in your environment.
- Check the installed version against the vendor advisory: unknown

## Timeline

- 2026-11-03T20:49:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95766

## From the sources

Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_