{"id":"CVE-2026-95776","kind":"vulnerability","aliases":["CVE-2026-95776"],"related":[],"title":"HPE Networking Fabric Composer: API path traversal lets low-privilege users read files","description":"An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to read certain files on the underlying operating system.","summary":"HPE Networking Fabric Composer has a path traversal flaw in its API that an authenticated low-privileged user can trigger when certain outside conditions are met. A successful attack lets the attacker read certain files on the underlying operating system.","severity":"low","cvss":3.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["hpe","infrastructure","network-management","networking-fabric-composer"],"not_affected_if":["no-authenticated-api-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-03T20:18:26+00:00","first_seen_at":"2026-11-03T20:49:27+00:00","triaged_at":"2026-11-03T20:52:04+00:00","updated_at":"2026-11-03T20:52:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-03T20:52:04Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE Networking Fabric Composer: API path traversal lets low-privilege users read files","impact":"low","summary":"HPE Networking Fabric Composer has a path traversal flaw in its API that an authenticated low-privileged user can trigger when certain outside conditions are met. A successful attack lets the attacker read certain files on the underlying operating system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","networking-fabric-composer","network-management"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker reads certain files on the underlying operating system","analyst_note":"Check the HPE security bulletin for affected versions, fixed versions and the exact preconditions; the NVD entry alone gives none.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-authenticated-api-users"],"who_is_affected":"Teams that run HPE Networking Fabric Composer with API access enabled for user accounts are the ones exposed. The sources say exploitation depends on preconditions outside the attacker's control, and they do not describe those preconditions. unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000643,"input_tokens":4124,"output_tokens":462,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-95776':17A,20A 'allow':110C 'api':5A,41B,79C 'attack':59B,62B,102C,112C 'authent':44B,72C,91C 'certain':52B,64B,97C,115C 'compos':4A,29B,33B,84C 'condit':54B 'control':104C 'could':86C,109C 'cve':15A,18A 'exist':76C 'exploit':88C,108C 'fabric':3A,28B,32B,83C 'file':14A,65B,116C 'flaw':38B 'hpe':1A,21B,30B,81C 'infrastructur':22B 'let':8A,60B 'low':10A,46B,93C 'low-privileg':9A,45B,92C 'manag':25B 'met':56B,106C 'network':2A,24B,27B,31B,82C 'network-manag':23B 'networking-fabric-compos':26B 'oper':69B,120C 'outsid':53B,99C 'path':6A,36B,73C 'precondit':98C 'privileg':11A,47B,94C 'read':13A,63B,114C 'success':58B,107C 'system':70B,121C 'travers':7A,37B,74C 'trigger':50B 'under':68B,119C 'user':12A,48B,95C 'vulner':75C","nicknames":[],"mitigations":[],"who_affected":"Teams that run HPE Networking Fabric Composer with API access enabled for user accounts are the ones exposed. The sources say exploitation depends on preconditions outside the attacker's control, and they do not describe those preconditions. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["hpe","infrastructure","low","networkingfabriccomposer","networkmanagement"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95776","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95776","severity":null,"published_at":"2026-11-03T20:18:26+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:27+00:00","fetched_at":"2026-11-03T20:49:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}