CVE-2026-95747High· 7.5▾ TwilightA privilege escalation vulnerability exists in the SSH interface of HPE Networking Fabric Composer which could allow an authenticated low-privileged attacker to exceed their authorized level of access, if certain preconditions outside of…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
A privilege escalation vulnerability exists in the SSH interface of HPE Networking Fabric Composer which could allow an authenticated low-privileged attacker to exceed their authorized level of access, if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain unauthorized access to internal services of the affected system.
fabric_composer >= 7.4.0 <= 7.4.0fabric_composer >= 7.0.0 <= 7.3.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-95777Low· 3.1Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface
CVE-2026-95774Low· 3.7Unauthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
CVE-2026-95775Low· 3.3Authenticated Local Information Disclosure Vulnerability in HPE Networking Fabric Composer
CVE-2026-95776Low· 3.1Authenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read
CVE-2026-95772Medium· 4.2Authenticated Race Condition in API of HPE Networking Fabric Composer
CVE-2026-95773Low· 3.8Authenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric Composer