{"id":"CVE-2026-95753","aliases":[],"cve":{"records":[{"id":"CVE-2026-95753","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:53:35.472Z","published":"2026-11-03T19:51:09.794Z","modified":"2026-11-09T12:55:14.344Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-03T19:51:09.794Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-09T12:55:14.344Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[{"id":"CWE-269","description":"CWE-269 Improper Privilege Management","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-09T12:51:54.623886Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Privilege Escalation in HPE Networking Fabric Composer API","titleSource":"hpe","descriptionSource":"hpe","description":"A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to disclose network traffic from switches managed by Fabric Composer.","score":7.1,"severity":"high","published":"2026-11-03T19:51:09.794Z","modified":"2026-11-09T12:55:14.344Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Fabric Composer","platforms":[],"versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.0","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.3.4","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95753"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95753","modified":"2026-11-09T12:55:14.344Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95753"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","score":7.1}],"sourceAffected":[],"observedAt":"2026-11-09T13:05:40.779Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T21:25:33.720Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T13:10:32.687Z","attemptedAt":"2026-11-09T13:10:32.687Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T13:10:32.996Z","attemptedAt":"2026-11-09T13:10:32.996Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T13:10:32.824Z","attemptedAt":"2026-11-09T13:10:32.824Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T13:10:32.618Z","attemptedAt":"2026-11-09T13:10:32.618Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-95753","url":"https://www.first.org/epss/","probability":0.0024,"percentile":0.15224,"date":"2026-11-08","checkedAt":"2026-11-09T13:10:32.618Z"},{"source":"NVD","id":"CVE-2026-95753","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95753","modified":"2026-11-03T20:30:24.880","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","checkedAt":"2026-11-09T13:10:32.687Z"},{"source":"ENISA EUVD","id":"EUVD-2026-116171","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116171","modified":"Nov 3, 2026, 7:51:09 PM","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","checkedAt":"2026-11-09T13:10:32.824Z"},{"source":"GitHub Advisory Database","id":"GHSA-5fq5-5wfx-7q6c","url":"https://github.com/advisories/GHSA-5fq5-5wfx-7q6c","modified":"2026-11-03T21:32:16Z","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","checkedAt":"2026-11-09T13:10:32.996Z"}],"aiSummary":{"text":"A privilege escalation vulnerability in HPE Networking Fabric Composer API versions 7.0.0 to 7.4.0 may allow an authenticated attacker with low privileges to disclose network traffic. The weakness is due to improper privilege management. Successful exploitation requires authenticated access.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-09T13:06:04.351Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95753"}]}}