Live › vulnerability › CVE-2026-95776
HPE Networking Fabric Composer has a path traversal flaw in its API that an authenticated low-privileged user can trigger when certain outside conditions are met. A successful attack lets the attacker read certain files on the underlying operating system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Teams that run HPE Networking Fabric Composer with API access enabled for user accounts are the ones exposed. The sources say exploitation depends on preconditions outside the attacker's control, and they do not describe those preconditions. unknown
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to read certain files on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-95776")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.