Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface
CVE-2026-95765

5.4MEDIUM

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95765?

A sensitive information disclosure vulnerability has been identified in the web-based management interface of HPE Networking Fabric Composer. This vulnerability can be exploited by unauthorized remote attackers to gain access to confidential information without authentication. Organizations using this product should implement security measures to mitigate the risk of unauthorized information exposure.

Affected Version(s)

Fabric Composer 7.4.0

Fabric Composer 7.4.0

Fabric Composer 7.0.0 <= 7.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.