Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-95758 EUVD-2026-116175GHSA-mhx2-6mh3-7phw

Authenticated Authorization Bypass in the API of HPE Networking Fabric Composer

Published Nov 3, 2026 · Updated Nov 9, 2026 · Assigned by hpe

Description

An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker to bypass security restrictions and modify protected resources on the affected system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Fabric Composer 7.4.0 – ≤ 7.4.0, 7.0.0 – ≤ 7.3.4 —

References