CVE-2026-95762Medium· 5.9▾ SunlitAn insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated administrative …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated administrative attacker to maintain persistent access to the affected system.
fabric_composer >= 7.4.0 <= 7.4.0fabric_composer >= 7.0.0 <= 7.3.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-95777Low· 3.1Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface
CVE-2026-95774Low· 3.7Unauthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
CVE-2026-95775Low· 3.3Authenticated Local Information Disclosure Vulnerability in HPE Networking Fabric Composer
CVE-2026-95776Low· 3.1Authenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read
CVE-2026-95772Medium· 4.2Authenticated Race Condition in API of HPE Networking Fabric Composer
CVE-2026-95773Low· 3.8Authenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric Composer