Privilege Escalation in HPE Networking Fabric Composer API
CVE-2026-95753

7.1HIGH

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95753?

A vulnerability in the API of HPE Networking Fabric Composer allows an authenticated attacker with low privileges to potentially disclose network traffic from switches managed by the system. This weakness could result in unauthorized access to sensitive information, emphasizing the need for robust security measures to protect network integrity.

Affected Version(s)

Fabric Composer 7.4.0

Fabric Composer 7.4.0

Fabric Composer 7.0.0 <= 7.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.