Improper Certificate Validation in HPE Networking Fabric Composer
CVE-2026-95750

7.5HIGH

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95750?

An improper certificate validation vulnerability in HPE Networking Fabric Composer can potentially enable an unauthenticated remote attacker to gain access to sensitive information. The exploitation of this vulnerability depends on specific preconditions that are beyond the attacker's control. If successfully exploited, the attacker may acquire sensitive data, including user credentials, thereby compromising the integrity of the affected environments.

Affected Version(s)

Fabric Composer 7.4.0

Fabric Composer 7.4.0

Fabric Composer 7.0.0 <= 7.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.