CVE-2026-95736
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
52/100
Published: 2026-11-03
Modified: 2026-11-03
First seen: 2026-11-03
Status: active
Attack Surface
Adjacent
No Auth
No Interaction
Conf. Impact
Integ. Impact
Scope Change
CVSS Vector Breakdown
AV:
Adjacent
AC:
High
PR:
None
UI:
None
S:
Changed
C:
High
I:
High
A:
High
Description
Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept sensitive information.
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | Fabric Composer | 7.4.0 |
| Hewlett Packard Enterprise (HPE) | Fabric Composer | 7.0.0 |