CVE-2026-95736High· 8.3▾ TwilightImproper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's contro…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept sensitive information.
fabric_composer >= 7.4.0 <= 7.4.0fabric_composer >= 7.0.0 <= 7.3.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-95777Low· 3.1Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface
CVE-2026-95774Low· 3.7Unauthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
CVE-2026-95775Low· 3.3Authenticated Local Information Disclosure Vulnerability in HPE Networking Fabric Composer
CVE-2026-95776Low· 3.1Authenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read
CVE-2026-95772Medium· 4.2Authenticated Race Condition in API of HPE Networking Fabric Composer
CVE-2026-95773Low· 3.8Authenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric Composer