Live › vulnerability › CVE-2026-95769
An unauthenticated remote attacker can send API requests that make the client address recorded in Fabric Composer's audit logs false. The flaw lets an attacker hide or misattribute activity in the audit trail.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Teams running HPE Networking Fabric Composer with its API exposed to a network the attacker can reach. The sources do not give affected versions or the vendor fix, so the exposed range is unknown. Teams that do not run this product can skip it.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to falsify the client address recorded in audit records.
This page as .md · .json · in your agent: get_signal("CVE-2026-95769")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.