CVE-2026-95769
Awaiting Analysis Awaiting Analysis - Queue

API Audit Log Spoofing in HPE Networking Fabric Composer

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: Hewlett Packard Enterprise (HPE)

Description
An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to falsify the client address recorded in audit records.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-95769
EUVD
EUVD-2026-116186

Affected Vendors & Products

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an unauthenticated remote attacker to falsify the client address recorded in audit logs of HPE Networking Fabric Composer's API. It does not grant access or modify data but could mislead investigations by altering log entries.

Impact Analysis

It could lead to incorrect attribution of actions in audit logs, making it harder to trace malicious activity or comply with forensic requirements. While not directly causing data breaches, it undermines trust in log integrity.

Compliance Impact

It may violate requirements for accurate audit logging in GDPR (accountability) and HIPAA (integrity). Falsified logs could fail audits or investigations, risking non-compliance penalties.

Mitigation Strategies

Apply patches or updates from HPE to address the audit log spoofing vulnerability in Fabric Composer. Monitor network traffic for unusual API requests and restrict access to the API interface to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-95769. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...