← CVE index
Vulnerability record/PUBLISHED/Published Nov 3, 2026 19:51:02 UTC

CVE-2026-95746

An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.

Base score7.5/ 10
SeverityHighCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes
Base severityHigh
Attack vectorAdjacentAV
Attack complexityHighAC
Privileges requiredNonePR
User interactionNoneUI
ScopeUnchangedS
Confidentiality impactHighC
Integrity impactHighI
Availability impactHighA
CVSS vector stringCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityhpe
Last updatedNov 9, 2026 18:41:37 UTC
PublishedNov 3, 2026 19:51:02 UTC
ReservedSep 22, 2026 14:53:35 UTC

Credits

  • Internal security research (HPE Networking).