Authorization Bypass in HPE Networking Fabric Composer API
CVE-2026-95758

6.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95758?

An authorization bypass issue has been identified in the API of HPE Networking Fabric Composer, potentially allowing an authenticated attacker to circumvent established security protocols. This could enable the attacker to alter settings or manipulate resources that are otherwise protected, raising significant risks for the integrity of the affected system.

Affected Version(s)

Fabric Composer 7.4.0

Fabric Composer 7.4.0

Fabric Composer 7.0.0 <= 7.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.