---
id: "CVE-2026-95771"
kind: "vulnerability"
aliases: ["CVE-2026-95771"]
title: "HPE Networking Fabric Composer: API endpoint leaks system information to logged-in users"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["api", "hpe", "infrastructure", "networking-fabric-composer"]
not_affected_if: ["no-authenticated-users"]
published_at: "2026-11-03T20:18:25+00:00"
first_seen_at: "2026-11-03T20:49:27+00:00"
updated_at: "2026-11-03T20:51:53+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95771", "first_seen_at": "2026-11-03T20:49:27+00:00"}]
---

# HPE Networking Fabric Composer: API endpoint leaks system information to logged-in users

An API endpoint in HPE Networking Fabric Composer discloses limited information about the affected system. An attacker who already has valid credentials can read this data remotely.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-03T20:49:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95771

## From the sources

An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated remote attacker to obtain limited information about the affected system.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_