{"id":"CVE-2026-95761","aliases":[],"cve":{"records":[{"id":"CVE-2026-95761","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:54:06.321Z","published":"2026-11-03T19:51:15.118Z","modified":"2026-11-09T17:43:50.989Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-03T19:51:15.118Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-09T17:43:50.989Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[{"id":"CWE-295","description":"CWE-295 Improper Certificate Validation","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-09T17:43:47.634487Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Authenticated Improper Certificate Validation leads to Information Disclosure in HPE Networking Fabric Composer","titleSource":"hpe","descriptionSource":"hpe","description":"An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to obtain sensitive information.","score":5.9,"severity":"medium","published":"2026-11-03T19:51:15.118Z","modified":"2026-11-09T17:43:50.989Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Fabric Composer","platforms":[],"versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.0","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.3.4","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95761"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95761","modified":"2026-11-09T17:43:50.989Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95761"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","score":5.9}],"sourceAffected":[],"observedAt":"2026-11-09T17:51:47.054Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:45:32.518Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T17:55:33.091Z","attemptedAt":"2026-11-09T17:55:33.091Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T17:55:32.463Z","attemptedAt":"2026-11-09T17:55:32.463Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T17:55:32.422Z","attemptedAt":"2026-11-09T17:55:32.422Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T17:55:33.096Z","attemptedAt":"2026-11-09T17:55:33.096Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-116178","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116178","modified":"Nov 3, 2026, 7:51:15 PM","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","checkedAt":"2026-11-09T17:55:32.422Z"},{"source":"GitHub Advisory Database","id":"GHSA-j4mm-r2p6-gxj7","url":"https://github.com/advisories/GHSA-j4mm-r2p6-gxj7","modified":"2026-11-03T21:32:22Z","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","checkedAt":"2026-11-09T17:55:32.463Z"},{"source":"NVD","id":"CVE-2026-95761","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95761","modified":"2026-11-03T20:30:24.880","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N","checkedAt":"2026-11-09T17:55:33.091Z"},{"source":"FIRST EPSS","id":"CVE-2026-95761","url":"https://www.first.org/epss/","probability":0.00132,"percentile":0.02804,"date":"2026-11-09","checkedAt":"2026-11-09T17:55:33.096Z"}],"aiSummary":{"text":"HPE Networking Fabric Composer versions 7.0.0 to 7.3.4 and 7.4.0 have an improper certificate validation weakness, allowing an authenticated attacker with low privileges to obtain sensitive information. The vulnerability requires low-privilege access. The impact is information disclosure.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-09T17:56:03.229Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95761"}]}}