CVE-2026-95758
Awaiting Analysis Awaiting Analysis - Queue

Authorization Bypass in HPE Networking Fabric Composer API

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: Hewlett Packard Enterprise (HPE)

Description
An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker to bypass security restrictions and modify protected resources on the affected system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-95758
EUVD
EUVD-2026-116175

Affected Vendors & Products

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authorization bypass in the API of HPE Networking Fabric Composer. It allows an authenticated attacker to bypass security restrictions and modify protected resources on the affected system.

Impact Analysis

An attacker could exploit this to modify protected resources, potentially leading to unauthorized changes in system configuration or data. This could disrupt services or compromise system integrity.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating compliance requirements for data protection and integrity in standards like GDPR and HIPAA.

Mitigation Strategies

Apply patches or updates provided by HPE to fix the authorization bypass in Fabric Composer. Restrict API access to trusted users only and monitor for unauthorized modifications to protected resources.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-95758. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...