Improper Certificate Validation in HPE Networking Fabric Composer
CVE-2026-95763

5.9MEDIUM

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95763?

An improper certificate validation vulnerability in HPE Networking Fabric Composer could enable an unauthenticated remote attacker to gain access to sensitive information. If specific preconditions, beyond the attacker's control, are satisfied, successful exploitation may allow for interception of files during transfer as well as access to stored credentials for remote servers. This vulnerability underscores the importance of robust certificate validation mechanisms to safeguard sensitive data from unauthorized access.

Affected Version(s)

Fabric Composer 7.4.0

Fabric Composer 7.4.0

Fabric Composer 7.0.0 <= 7.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.