Skip to content
OpenAdvisories
High · 8.8 CVE-2026-95734 EUVD-2026-116278GHSA-xpv9-6xqp-8xqh

Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API

Published Nov 3, 2026 · Updated Nov 9, 2026 · Assigned by hpe

Description

A sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low-privileged user to access sensitive information beyond what is authorized by the user's existing privilege level. Successful exploitation could allow an attacker to obtain sensitive credentials stored on the affected system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Fabric Composer 7.4.0 – ≤ 7.4.0, 7.0.0 – ≤ 7.3.4 —

References