{"id":"CVE-2026-95767","aliases":[],"cve":{"records":[{"id":"CVE-2026-95767","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:54:32.623Z","published":"2026-11-03T19:51:19.760Z","modified":"2026-11-09T13:27:51.341Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-03T19:51:19.760Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-09T13:27:51.341Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[{"id":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-09T13:25:18.944860Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Unauthenticated Information Disclosure in HPE Networking Fabric Composer","titleSource":"hpe","descriptionSource":"hpe","description":"An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information about the affected system.","score":5.3,"severity":"medium","published":"2026-11-03T19:51:19.760Z","modified":"2026-11-09T13:27:51.341Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Fabric Composer","platforms":[],"versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.0","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.3.4","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95767"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95767","modified":"2026-11-09T13:27:51.341Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95767"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","score":5.3}],"sourceAffected":[],"observedAt":"2026-11-09T13:36:16.777Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:00:32.916Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T13:40:35.307Z","attemptedAt":"2026-11-09T13:40:35.307Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T13:40:35.461Z","attemptedAt":"2026-11-09T13:40:35.461Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T13:40:36.014Z","attemptedAt":"2026-11-09T13:40:36.014Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T13:40:35.107Z","attemptedAt":"2026-11-09T13:40:35.107Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-95767","url":"https://www.first.org/epss/","probability":0.00251,"percentile":0.16597,"date":"2026-11-08","checkedAt":"2026-11-09T13:40:35.107Z"},{"source":"NVD","id":"CVE-2026-95767","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95767","modified":"2026-11-03T20:30:24.880","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-09T13:40:35.307Z"},{"source":"GitHub Advisory Database","id":"GHSA-4wgv-4q4g-w3x2","url":"https://github.com/advisories/GHSA-4wgv-4q4g-w3x2","modified":"2026-11-03T21:32:17Z","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-09T13:40:35.461Z"},{"source":"ENISA EUVD","id":"EUVD-2026-116184","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116184","modified":"Nov 3, 2026, 7:51:19 PM","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-09T13:40:36.014Z"}],"aiSummary":{"text":"HPE Networking Fabric Composer versions 7.0.0 to 7.4.0 have an unauthenticated information disclosure vulnerability, potentially allowing remote attackers to obtain sensitive system information. The vulnerability exists in the API. Required attacker access is unauthenticated and remote.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-09T13:41:02.226Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95767"}]}}