Skip to content
OpenAdvisories
High · 7.7 CVE-2026-95744 EUVD-2026-116161GHSA-ph7h-cpr6-6hw7

Authenticated Adjacent Sensitive Information Disclosure in HPE Networking Fabric Composer

Published Nov 3, 2026 · Updated Nov 9, 2026 · Assigned by hpe

Description

A sensitive information disclosure vulnerability in the affected interface of HPE Networking Fabric Composer could allow an authenticated low-privileged attacker to access sensitive information, if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept protected network traffic.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Fabric Composer 7.4.0 – ≤ 7.4.0, 7.0.0 – ≤ 7.3.4 —

References