CVE-2026-95760 PUBLISHED

Privilege Escalation Vulnerability in HPE Networking Fabric Composer API

Assigner: hpe
Reserved: 22.09.2026 Published: 03.11.2026 Updated: 03.11.2026

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated attacker with low privileges to gain elevated privileges on the affected system.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS Score: 6.4

Product Status

Vendor Hewlett Packard Enterprise (HPE)
Product Fabric Composer
Versions Default: affected
  • affected from 7.4.0 to 7.4.0 (incl.)
  • affected from 7.0.0 to 7.3.4 (incl.)

Credits

  • Internal security research (HPE Networking). reporter

References