CVE-2026-95770

MEDIUM
MEDIUM Priority: 0.00 BB Relevance: 24/100
Published: 2026-11-03 Modified: 2026-11-09 First seen: 2026-11-03 Status: active

Attack Surface

No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: Low
UI: None
S: Unchanged
C: High
I: None
A: None

Description

A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low-privileged user with local access to view sensitive information, if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain sensitive information from the affected system.

Weakness Classification (1)

Bug Bounty Relevance

24 / 100
✓ No user interaction

CVSS Score

4.7 / 10.0 v3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.09%
Raw Score 0.000870
Percentile 0.4%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00087
2026-11-13
0.00087
2026-11-12
0.00087
2026-11-10
0.00087
2026-11-09
0.00087
2026-11-08
0.00087
2026-11-07
0.00087
2026-11-06
0.00087
2026-11-05
0.00087
2026-11-04
0.00087

Intelligence Sources

mitre ref →
nvd ref →