Vulnerability record/PUBLISHED/Published Nov 3, 2026 19:51:27 UTC
CVE-2026-95777
A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged attacker to obtain certain sensitive information stored on the affected system.
Base score3.1/ 10
SeverityLowCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityLow
Attack vectorNetworkAV
Attack complexityHighAC
Privileges requiredLowPR
User interactionNoneUI
ScopeUnchangedS
Confidentiality impactLowC
Integrity impactNoneI
Availability impactNoneA
CVSS vector string
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:NCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authorityhpe
Last updatedNov 3, 2026 19:51:27 UTC
PublishedNov 3, 2026 19:51:27 UTC
ReservedSep 22, 2026 14:54:56 UTC
Credits
- Internal security research (HPE Networking).