---
id: "CVE-2026-95770"
kind: "vulnerability"
aliases: ["CVE-2026-95770"]
title: "HPE Networking Fabric Composer: OS flaw leaks sensitive information to local users"
severity: "medium"
cvss: 4.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["hpe-networking-fabric-composer", "infrastructure", "self-hosted"]
not_affected_if: ["no-local-low-privilege-accounts"]
published_at: "2026-11-03T20:18:25+00:00"
first_seen_at: "2026-11-03T20:49:27+00:00"
updated_at: "2026-11-03T20:51:53+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95770", "first_seen_at": "2026-11-03T20:49:27+00:00"}]
---

# HPE Networking Fabric Composer: OS flaw leaks sensitive information to local users

The underlying operating system of HPE Networking Fabric Composer exposes sensitive information to an authenticated, low-privileged user with local access. The sources say an attacker can obtain sensitive information from the affected system only if preconditions outside the attacker's control are met.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-03T20:49:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95770

## From the sources

A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low-privileged user with local access to view sensitive information, if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain sensitive information from the affected system.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_