Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-95768 EUVD-2026-116185GHSA-q7c8-m9rq-hc9p

Privilege Escalation Leading to Information Disclosure in HPE Networking Fabric Composer API

Published Nov 3, 2026 · Updated Nov 9, 2026 · Assigned by hpe

Description

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated low-privileged remote attacker to obtain sensitive information from the affected system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Fabric Composer 7.4.0 – ≤ 7.4.0, 7.0.0 – ≤ 7.3.4 —

References