Missing Integrity Verification in HPE Networking Fabric Composer
CVE-2026-95741

8HIGH

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95741?

A vulnerability exists in the API of HPE Networking Fabric Composer due to a lack of integrity verification. This flaw can be exploited by low-privileged authenticated attackers to elevate their privileges, potentially compromising system integrity and security. Mitigation steps should include updating to the latest versions and applying any necessary patches as outlined by the vendor.

Affected Version(s)

Fabric Composer 7.4.0

Fabric Composer 7.4.0

Fabric Composer 7.0.0 <= 7.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.