CVE-2026-95759 PUBLISHED

Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer

Assigner: hpe
Reserved: 22.09.2026 Published: 03.11.2026 Updated: 03.11.2026

Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS Score: 6.5

Product Status

Vendor Hewlett Packard Enterprise (HPE)
Product Fabric Composer
Versions Default: affected
  • affected from 7.4.0 to 7.4.0 (incl.)
  • affected from 7.0.0 to 7.3.4 (incl.)

Credits

  • Internal security research (HPE Networking). reporter

References