Privilege Escalation Vulnerability in HPE Networking Fabric Composer
CVE-2026-95768

5.3MEDIUM

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95768?

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer under specific conditions outside the attacker's control. Exploiting this flaw could enable an authenticated low-privileged remote attacker to access sensitive information from the affected system, potentially leading to unauthorized actions and data exposure.

Affected Version(s)

Fabric Composer 7.4.0

Fabric Composer 7.4.0

Fabric Composer 7.0.0 <= 7.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.