Vulnerability record/PUBLISHED/Published Nov 3, 2026 19:51:20 UTC
CVE-2026-95768
A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated low-privileged remote attacker to obtain sensitive information from the affected system.
Base score5.3/ 10
SeverityMediumCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityMedium
Attack vectorNetworkAV
Attack complexityHighAC
Privileges requiredLowPR
User interactionNoneUI
ScopeUnchangedS
Confidentiality impactHighC
Integrity impactNoneI
Availability impactNoneA
CVSS vector string
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authorityhpe
Last updatedNov 3, 2026 19:51:20 UTC
PublishedNov 3, 2026 19:51:20 UTC
ReservedSep 22, 2026 14:54:32 UTC
Credits
- Internal security research (HPE Networking).