CVE-2026-95746
Awaiting Analysis Awaiting Analysis - Queue

Authentication Bypass in HPE Networking Fabric Composer

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: Hewlett Packard Enterprise (HPE)

Description
An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to the affected system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-95746
EUVD
EUVD-2026-116163

Affected Vendors & Products

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authentication bypass in HPE Networking Fabric Composer's API endpoint. It allows an unauthenticated attacker within adjacent network access to bypass authentication controls if specific external conditions are met. Exploitation could grant unauthorized system access.

Impact Analysis

If exploited, an attacker could gain unauthorized access to the affected system, potentially leading to data breaches, system manipulation, or further network compromise. The impact depends on the system's role and data stored.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating confidentiality requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, fines, or reputational damage depending on the data exposed.

Mitigation Strategies

Apply patches or updates from HPE to address the authentication bypass in Fabric Composer. Isolate affected systems from untrusted networks. Monitor API endpoint access logs for unusual activity. Disable unnecessary API endpoints if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-95746. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...