by Kastro
Paper/Archive/CVE-2026-95731

CVE-2026-95731

Hewlett Packard Enterprise (HPE) Fabric Composer — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

CVSS 9.8
critical.is priorityof 100
29
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. Successful exploitation could allow an attacker to gain unauthorized administrative access to the affected system with elevated privileges.

Affected

ProductAffectedFixed inSource
Fabric Composer7.4.0 – 7.4.0–CNA
Fabric Composer7.0.0 – 7.3.4–CNA

Scores by source

hpe (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US