by Kastro
Paper/Archive/CVE-2026-95732

CVE-2026-95732

Hewlett Packard Enterprise (HPE) Fabric Composer — Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution

CVSS 9.6
critical.is priorityof 100
29
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system.

Affected

ProductAffectedFixed inSource
Fabric Composer7.4.0 – 7.4.0–CNA
Fabric Composer7.0.0 – 7.3.4–CNA

Scores by source

hpe (CNA)9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US