CVE-2026-95758 PUBLISHED

Authenticated Authorization Bypass in the API of HPE Networking Fabric Composer

Assigner: hpe
Reserved: 22.09.2026 Published: 03.11.2026 Updated: 03.11.2026

An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker to bypass security restrictions and modify protected resources on the affected system.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS Score: 6.5

Product Status

Vendor Hewlett Packard Enterprise (HPE)
Product Fabric Composer
Versions Default: affected
  • affected from 7.4.0 to 7.4.0 (incl.)
  • affected from 7.0.0 to 7.3.4 (incl.)

Credits

  • Internal security research (HPE Networking). reporter

References