Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-95731 EUVD-2026-116275GHSA-jx48-vcgf-gh86

Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

Published Nov 3, 2026 · Updated Nov 9, 2026 · Assigned by hpe

Description

Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. Successful exploitation could allow an attacker to gain unauthorized administrative access to the affected system with elevated privileges.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Fabric Composer 7.4.0 – ≤ 7.4.0, 7.0.0 – ≤ 7.3.4 —

References