fabric_composer vulnerabilities
CVEs whose affected-version data names the fabric_composer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
46 CVEsRSS
CVE-2026-95777Low· 3.1Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management Interface
A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged attacker to obtain certain sensitive information stored on the af…
CVE-2026-95776Low· 3.1Authenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File Read
An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are met. Succe…
CVE-2026-95775Low· 3.3Authenticated Local Information Disclosure Vulnerability in HPE Networking Fabric Composer
A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged local attacker to read certain files on the underlying operati…
CVE-2026-95774Low· 3.7Unauthenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information from the affected system.
CVE-2026-95773Low· 3.8Authenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric Composer
A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a low-privileged local attacker to cause a partial denial-of-service condition affecting o…
CVE-2026-95772Medium· 4.2Authenticated Race Condition in API of HPE Networking Fabric Composer
A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to corrupt the configuration state of the affected system.
CVE-2026-95771Medium· 4.3Authenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint
An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated remote attacker to obtain limited information about the affected system.
CVE-2026-95770Medium· 4.7Authenticated Local Sensitive Information Disclosure in HPE Networking Fabric Composer
A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low-privileged user with local access to view sensitive information, if certain preconditi…
CVE-2026-95769Medium· 5.3Unauthenticated Audit Log Spoofing in API of HPE Networking Fabric Composer
An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to falsify the client address recorded in audit records.
CVE-2026-95768Medium· 5.3Privilege Escalation Leading to Information Disclosure in HPE Networking Fabric Composer API
A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated low-privileged remote attac…
CVE-2026-95766Medium· 5.3Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sen…
CVE-2026-95767Medium· 5.3Unauthenticated Information Disclosure in HPE Networking Fabric Composer
An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information about the affected system.
CVE-2026-95765Medium· 5.4Unauthenticated Sensitive Information Disclosure in Web-Based Management Interface of HPE Networking Fabric Composer
A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information.
CVE-2026-95764Medium· 5.7Unauthenticated Adjacent Improper Certificate Validation in HPE Networking Fabric Composer
An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to access sensitive information.
CVE-2026-95763Medium· 5.9Unauthenticated Improper Certificate Validation allows Information Disclosure in HPE Networking Fabric Composer
An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if certain preconditions outside of the attacker's control are met. Success…
CVE-2026-95762Medium· 5.9Authenticated Insufficient Session Expiration Vulnerability in the API of HPE Networking Fabric Composer
An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated administrative …
CVE-2026-95761Medium· 5.9Authenticated Improper Certificate Validation leads to Information Disclosure in HPE Networking Fabric Composer
An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to obtain sensitive information.
CVE-2026-95760Medium· 6.4Privilege Escalation Vulnerability in HPE Networking Fabric Composer API
A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated attacker with low privilege…
CVE-2026-95759Medium· 6.5Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer
Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.
CVE-2026-95758Medium· 6.5Authenticated Authorization Bypass in the API of HPE Networking Fabric Composer
An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker to bypass security restrictions and modify protected resources on the affected system.
CVE-2026-95757Medium· 6.5Authentication Bypass Vulnerability in HPE Networking Fabric Composer API
A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with low privileges to write arbitrary files to remote servers configured on the affecte…
CVE-2026-95756Medium· 6.6Authenticated Command Injection Vulnerability in the API of HPE Networking Fabric Composer
A command injection vulnerability exists in the API of HPE Networking Fabric Composer and could be exploited by an authenticated remote attacker with administrative privileges if certain preconditions outside of the attacker's control ar…
CVE-2026-95755Medium· 6.8Unauthenticated Adjacent Improper Certificate Validation allows Interception of Management Traffic in HPE Networking Fabric Composer
Improper certificate validation vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept management traffic if certain preconditions outside of the attacker…
CVE-2026-95753High· 7.1Privilege Escalation in HPE Networking Fabric Composer API
A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to disclose network traffic from switches managed by Fabric Compo…
CVE-2026-95752High· 7.1Local Privilege Escalation in HPE Networking Fabric Composer
A local privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged local attacker to elevate their privileges on the affected system.
CVE-2026-95748High· 7.5Unauthenticated Adjacent SQL Injection Vulnerability in HPE Networking Fabric Composer
A SQL injection vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to run arbitrary database commands.
CVE-2026-95751High· 7.4Unauthenticated Improper Certificate Validation Leads to Authentication Bypass in HPE Networking Fabric Composer
An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker'…
CVE-2026-95750High· 7.5Unauthenticated Improper Certificate Validation in HPE Networking Fabric Composer
An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if certain preconditions outside of the attacker's control are met. Success…
CVE-2026-95749High· 7.5Unauthenticated Missing Integrity Verification in HPE Networking Fabric Composer
A missing integrity verification vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system.
CVE-2026-95747High· 7.5Privilege Escalation in the SSH Interface of HPE Networking Fabric Composer
A privilege escalation vulnerability exists in the SSH interface of HPE Networking Fabric Composer which could allow an authenticated low-privileged attacker to exceed their authorized level of access, if certain preconditions outside of…