Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-95738— Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer

Quick assessment

Affected

Hewlett Packard Enterprise (HPE) Fabric Composer

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

HPE Networking Fabric Composer 受影响接口中的身份验证绕过漏洞，在满足攻击者无法控制的特定前置条件时，可能允许未经身份验证的远程攻击者绕过现有的身份验证控制。成功利用该漏洞可使攻击者获得受影响系统的管理员访问权限。

CVSS 8.1 · High EPSS 0.45% · P39 Updated Nov 04, 2026

Possible ATT&CK Techniques 2 AI

T1078 · Valid Accounts T1190 · Exploit Public-Facing Application

Affected Version Matrix 2

Vendor	Product	Version Range	Status
Hewlett Packard Enterprise (HPE)	Fabric Composer	`7.4.0≤ 7.4.0`	affected
		`7.0.0≤ 7.3.4`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Authentication Bypass in the Affected Interface of HPE Networking Fabric Composer

Source: CVE Program / CVE List V5

Vulnerability Description

Authentication bypass vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain administrative access to the affected system.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Hewlett Packard Enterprise (HPE)	Fabric Composer	7.4.0 ~ 7.4.0	-

II. Public POCs for CVE-2026-95738

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-95738

请登录查看更多情报信息。

Other References for CVE-2026-95738 (1)

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US

https://www.cve.org/CVERecord?id=CVE-2026-95738

Same Patch Batch · Hewlett Packard Enterprise (HPE) · 2026-11-03 · 55 CVEs total

CVE-2026-95731	9.8 CRITICAL	Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Comma
CVE-2026-95732	9.6 CRITICAL	Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution
CVE-2026-95733	9.6 CRITICAL	Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitr
CVE-2026-95722	8.8 HIGH	Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) Client
CVE-2026-95734	8.8 HIGH	Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API
CVE-2026-95735	8.7 HIGH	Improper Certificate Validation in HPE Networking Fabric Composer
CVE-2026-95723	8.4 HIGH	Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege
CVE-2026-95736	8.3 HIGH	Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking
CVE-2026-95737	8.2 HIGH	Local Privilege Escalation in HPE Networking Fabric Composer
CVE-2026-95739	8.1 HIGH	Unauthenticated Improper Restriction of Excessive Authentication Attempts in the API of HP
CVE-2026-95724	8.1 HIGH	Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Netw
CVE-2026-95740	8.0 HIGH	Unauthenticated Adjacent Improper Certificate Validation Vulnerability leads to Informatio
CVE-2026-95741	8.0 HIGH	Authenticated Missing Integrity Verification in API of HPE Networking Fabric Composer
CVE-2026-95725	7.8 HIGH	Authenticated Local Command Injection Vulnerability in the VIA Client for Linux
CVE-2026-95743	7.8 HIGH	Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer
CVE-2026-95742	7.8 HIGH	Authenticated Local Arbitrary File Write Vulnerability in HPE Networking Fabric Composer
CVE-2026-95744	7.7 HIGH	Authenticated Adjacent Sensitive Information Disclosure in HPE Networking Fabric Composer
CVE-2026-95726	7.5 HIGH	Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networki
CVE-2026-95746	7.5 HIGH	Authentication Bypass in the API Endpoint of HPE Networking Fabric Composer
CVE-2026-95749	7.5 HIGH	Unauthenticated Missing Integrity Verification in HPE Networking Fabric Composer

Showing top 20 of 55 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Fabric Composer

Same vendor: Hewlett Packard Enterprise (HPE)