Dashboard / CVE-2026-95757

CVE-2026-95757

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 38/100
Published: 2026-11-03 Modified: 2026-11-09 First seen: 2026-11-03 Status: active

Attack Surface

Low Complexity No Interaction Integ. Impact Scope Change

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Changed
C: None
I: High
A: None

Description

A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with low privileges to write arbitrary files to remote servers configured on the affected system.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
Hewlett Packard Enterprise (HPE) Fabric Composer 7.4.0
Hewlett Packard Enterprise (HPE) Fabric Composer 7.0.0
Hewlett Packard Enterprise (HPE) Fabric Composer 7.4.0
Hewlett Packard Enterprise (HPE) Fabric Composer 7.0.0

References & Advisories (1)

Bug Bounty Relevance

38 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

6.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

EPSS — Exploitation Probability

0.13%
Raw Score 0.001260
Percentile 2.3%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00126
2026-11-13
0.00126
2026-11-12
0.00126
2026-11-10
0.00126
2026-11-09
0.00132
2026-11-08
0.00132
2026-11-07
0.00132
2026-11-06
0.00132
2026-11-05
0.00132
2026-11-04
0.00132

Intelligence Sources

mitre ref →
nvd ref →

External Links