Race Condition Vulnerability in HPE Networking Fabric Composer
CVE-2026-95772

4.2MEDIUM

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95772?

A vulnerability exists in the API of HPE Networking Fabric Composer that allows an authenticated attacker with low privileges to exploit a race condition, potentially resulting in the corruption of the system's configuration state. This could lead to unintended behavior and impact the integrity of network operations, necessitating immediate attention and remediation.

Affected Version(s)

Fabric Composer 7.4.0

Fabric Composer 7.4.0

Fabric Composer 7.0.0 <= 7.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.