CVE-2026-76657

Awaiting Analysis Awaiting Analysis - Queue

Unauthenticated API Authentication Bypass in HPE Networking Fabric Composer

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the HPE Networking Fabric Composer host.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-01

Generated

2026-09-02

AI Q&A

2026-09-02

EPSS Evaluated

N/A

NVD

CVE-2026-76657

EUVD

EUVD-2026-69475

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_fabric_composer	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability allows an unauthenticated remote attacker to bypass authentication controls in the API of HPE Networking Fabric Composer. Successful exploitation could grant administrative privileges, leading to full compromise of the host system.

Impact Analysis

An attacker could gain complete control over the HPE Networking Fabric Composer host, potentially accessing sensitive data, modifying configurations, or disrupting network operations.

Compliance Impact

This vulnerability allows unauthenticated remote attackers to gain administrative privileges and compromise the HPE Networking Fabric Composer host. Such unauthorized access could lead to data breaches, unauthorized data exposure, or manipulation, which may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security).

Mitigation Strategies

Immediately restrict network access to the HPE Networking Fabric Composer API to trusted sources only. Disable unnecessary services and ports. Apply patches or updates from HPE as soon as they become available. Monitor for unusual administrative activity or unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-76657. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70