---
id: "CVE-2026-95772"
kind: "vulnerability"
aliases: ["CVE-2026-95772"]
title: "HPE Networking Fabric Composer: API race condition lets low-privilege users corrupt configuration"
severity: "medium"
cvss: 4.2
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["hpe-networking-fabric-composer", "infrastructure", "network-fabric"]
not_affected_if: []
published_at: "2026-11-03T20:18:26+00:00"
first_seen_at: "2026-11-03T20:49:27+00:00"
updated_at: "2026-11-03T20:51:58+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95772", "first_seen_at": "2026-11-03T20:49:27+00:00"}]
---

# HPE Networking Fabric Composer: API race condition lets low-privilege users corrupt configuration

A race condition in the API of HPE Networking Fabric Composer can be exploited by an authenticated attacker with low privileges. Successful exploitation corrupts the configuration state of the affected system.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-03T20:49:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95772

## From the sources

A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to corrupt the configuration state of the affected system.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_