{"id":"CVE-2026-95766","aliases":[],"cve":{"records":[{"id":"CVE-2026-95766","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:54:32.623Z","published":"2026-11-03T19:51:18.964Z","modified":"2026-11-09T13:22:37.873Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-03T19:51:18.964Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-09T13:22:37.873Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[{"id":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-09T13:20:56.225859Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer","titleSource":"hpe","descriptionSource":"hpe","description":"Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information.","score":5.3,"severity":"medium","published":"2026-11-03T19:51:18.964Z","modified":"2026-11-09T13:22:37.873Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Fabric Composer","platforms":[],"versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.0","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.3.4","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95766"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95766","modified":"2026-11-09T13:22:37.873Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95766"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","score":5.3}],"sourceAffected":[],"observedAt":"2026-11-09T13:36:15.006Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:00:33.317Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T13:40:36.582Z","attemptedAt":"2026-11-09T13:40:36.582Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T13:40:36.758Z","attemptedAt":"2026-11-09T13:40:36.758Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T13:40:37.503Z","attemptedAt":"2026-11-09T13:40:37.503Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T13:40:36.212Z","attemptedAt":"2026-11-09T13:40:36.212Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-95766","url":"https://www.first.org/epss/","probability":0.00189,"percentile":0.08549,"date":"2026-11-08","checkedAt":"2026-11-09T13:40:36.212Z"},{"source":"NVD","id":"CVE-2026-95766","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95766","modified":"2026-11-03T20:30:24.880","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-09T13:40:36.582Z"},{"source":"GitHub Advisory Database","id":"GHSA-mxvj-f892-p27v","url":"https://github.com/advisories/GHSA-mxvj-f892-p27v","modified":"2026-11-03T21:32:17Z","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-09T13:40:36.758Z"},{"source":"ENISA EUVD","id":"EUVD-2026-116183","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116183","modified":"Nov 3, 2026, 7:51:18 PM","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-09T13:40:37.503Z"}],"aiSummary":{"text":"HPE Networking Fabric Composer versions 7.0.0 to 7.4.0 are affected by a sensitive information disclosure vulnerability, allowing an authenticated attacker with low privileges to access sensitive information. The impact is the disclosure of sensitive information.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-09T13:41:10.443Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95766"}]}}