Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-95762 EUVD-2026-116179GHSA-8pj8-f2pj-7v76

Authenticated Insufficient Session Expiration Vulnerability in the API of HPE Networking Fabric Composer

Published Nov 3, 2026 · Updated Nov 9, 2026 · Assigned by hpe

Description

An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated administrative attacker to maintain persistent access to the affected system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Fabric Composer 7.4.0 – ≤ 7.4.0, 7.0.0 – ≤ 7.3.4 —

References