Vulnerability record/PUBLISHED/Published Nov 3, 2026 19:51:27 UTC
CVE-2026-95776
An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to read certain files on the underlying operating system.
Base score3.1/ 10
SeverityLowCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityLow
Attack vectorNetworkAV
Attack complexityHighAC
Privileges requiredLowPR
User interactionNoneUI
ScopeUnchangedS
Confidentiality impactLowC
Integrity impactNoneI
Availability impactNoneA
CVSS vector string
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:NCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authorityhpe
Last updatedNov 3, 2026 19:51:27 UTC
PublishedNov 3, 2026 19:51:27 UTC
ReservedSep 22, 2026 14:54:56 UTC
Credits
- Internal security research (HPE Networking).