Live › vulnerability › CVE-2026-95767
The API of HPE Networking Fabric Composer exposes sensitive information about the system to anyone who can reach it, without logging in. An unauthenticated remote attacker can read that data, which may help plan further attacks.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Teams that run HPE Networking Fabric Composer and expose its API to a network an attacker can reach. The sources do not name affected versions or the exact data exposed, so whether a given deployment is affected is unknown. Deployments where the API is limited to a trusted management network are less exposed.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information about the affected system.
This page as .md · .json · in your agent: get_signal("CVE-2026-95767")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.