Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-95757 EUVD-2026-116174GHSA-ggr2-hxh9-j327

Authentication Bypass Vulnerability in HPE Networking Fabric Composer API

Published Nov 3, 2026 · Updated Nov 9, 2026 · Assigned by hpe

Description

A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with low privileges to write arbitrary files to remote servers configured on the affected system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Fabric Composer 7.4.0 – ≤ 7.4.0, 7.0.0 – ≤ 7.3.4 —

References