{"id":"CVE-2026-95775","kind":"vulnerability","aliases":["CVE-2026-95775"],"related":[],"title":"HPE Fabric Composer: local user can read some OS files","description":"A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged local attacker to read certain files on the underlying operating system.","summary":"A flaw in the operating system under HPE Networking Fabric Composer lets a low-privileged local user read certain files. The sources do not say which files or which OS versions are affected.","severity":"low","cvss":3.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["fabric-composer","hpe","infrastructure","networking"],"not_affected_if":["no-local-accounts"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-03T20:18:26+00:00","first_seen_at":"2026-11-03T20:49:27+00:00","triaged_at":"2026-11-03T20:52:01+00:00","updated_at":"2026-11-03T20:52:01+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-03T20:52:01Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"HPE Fabric Composer: local user can read some OS files","impact":"low","summary":"A flaw in the operating system under HPE Networking Fabric Composer lets a low-privileged local user read certain files. The sources do not say which files or which OS versions are affected.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","fabric-composer","networking"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Low-privileged local user reads certain operating system files","analyst_note":"Find the HPE advisory for CVE-2026-95775 to get affected versions, the fixed version and the specific files exposed.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-local-accounts"],"who_is_affected":"Only a local attacker with a low-privilege account on the Fabric Composer host can trigger this, since the flaw is in the underlying operating system and not reachable from the network. Teams running HPE Networking Fabric Composer appliances should check the vendor advisory for affected versions. unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000628,"input_tokens":4094,"output_tokens":438,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-95775':13A,16A 'affect':56B 'allow':76C 'attack':82C 'certain':42B,85C 'compos':3A,19B,33B,72C 'could':75C 'cve':11A,14A 'disclosur':60C 'exist':62C 'exploit':74C 'fabric':2A,18B,32B,71C 'fabric-compos':17B 'file':10A,43B,50B,86C 'flaw':24B 'hpe':1A,20B,30B,69C 'inform':59C 'infrastructur':21B 'let':34B 'local':4A,39B,58C,81C 'low':37B,79C 'low-privileg':36B,78C 'network':22B,31B,70C 'oper':27B,66C,90C 'os':9A,53B 'privileg':38B,80C 'read':7A,41B,84C 'say':48B 'sourc':45B 'success':73C 'system':28B,67C,91C 'under':65C,89C 'user':5A,40B 'version':54B 'vulner':61C","nicknames":[],"mitigations":[],"who_affected":"Only a local attacker with a low-privilege account on the Fabric Composer host can trigger this, since the flaw is in the underlying operating system and not reachable from the network. Teams running HPE Networking Fabric Composer appliances should check the vendor advisory for affected versions. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["fabriccomposer","hpe","infrastructure","low","networking"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95775","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95775","severity":null,"published_at":"2026-11-03T20:18:26+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:27+00:00","fetched_at":"2026-11-03T20:49:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}