Skip to content
OpenAdvisories
High · 8.3 CVE-2026-95736 EUVD-2026-116280GHSA-c4rp-565m-whvq

Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking Fabric Composer

Published Nov 3, 2026 · Updated Nov 9, 2026 · Assigned by hpe

Description

Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept sensitive information.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Fabric Composer 7.4.0 – ≤ 7.4.0, 7.0.0 – ≤ 7.3.4 —

References