{"id":"CVE-2026-95759","aliases":[],"cve":{"records":[{"id":"CVE-2026-95759","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:54:06.321Z","published":"2026-11-03T19:51:13.575Z","modified":"2026-11-09T17:50:30.212Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-03T19:51:13.575Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-09T17:50:30.212Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[{"id":"CWE-778","description":"CWE-778 Insufficient Logging","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-09T17:50:25.518582Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer","titleSource":"hpe","descriptionSource":"hpe","description":"Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.","score":6.5,"severity":"medium","published":"2026-11-03T19:51:13.575Z","modified":"2026-11-09T17:50:30.212Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Fabric Composer","platforms":[],"versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.0","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.3.4","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95759"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95759","modified":"2026-11-09T17:50:30.212Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95759"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","score":6.5}],"sourceAffected":[],"observedAt":"2026-11-09T18:33:01.793Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T21:45:32.848Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T18:40:39.781Z","attemptedAt":"2026-11-09T18:40:39.781Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T18:40:40.622Z","attemptedAt":"2026-11-09T18:40:40.622Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T18:40:40.191Z","attemptedAt":"2026-11-09T18:40:40.191Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T18:40:40.132Z","attemptedAt":"2026-11-09T18:40:40.132Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-95759","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95759","modified":"2026-11-09T18:17:35.860","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","checkedAt":"2026-11-09T18:40:39.781Z"},{"source":"FIRST EPSS","id":"CVE-2026-95759","url":"https://www.first.org/epss/","probability":0.00266,"percentile":0.18622,"date":"2026-11-09","checkedAt":"2026-11-09T18:40:40.132Z"},{"source":"ENISA EUVD","id":"EUVD-2026-116176","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116176","modified":"Nov 3, 2026, 7:51:13 PM","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","checkedAt":"2026-11-09T18:40:40.191Z"},{"source":"GitHub Advisory Database","id":"GHSA-9jw6-3m4g-8qpx","url":"https://github.com/advisories/GHSA-9jw6-3m4g-8qpx","modified":"2026-11-09T18:32:53Z","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","checkedAt":"2026-11-09T18:40:40.622Z"}],"aiSummary":{"text":"HPE Networking Fabric Composer API has an audit log bypass vulnerability, allowing an authenticated attacker with low privileges to suppress their activity records on affected systems, including versions 7.0.0 to 7.4.0. The weakness is due to insufficient logging. Successful exploitation may have an impact on the system's audit records.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-09T18:36:11.866Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95759"}]}}