Path Traversal Vulnerability in HPE Networking Fabric Composer
CVE-2026-95776

3.1LOW

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95776?

An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer. This flaw may be exploited by a low-privileged user who meets specific conditions, allowing unauthorized access to sensitive files on the underlying operating system. It poses a risk of information exposure that could compromise system integrity and confidentiality.

Affected Version(s)

Fabric Composer 7.4.0

Fabric Composer 7.4.0

Fabric Composer 7.0.0 <= 7.3.4

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.