{"id":"CVE-2026-95770","aliases":[],"cve":{"records":[{"id":"CVE-2026-95770","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:54:32.623Z","published":"2026-11-03T19:51:22.402Z","modified":"2026-11-09T13:46:53.379Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-03T19:51:22.402Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-09T13:46:53.379Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[{"id":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-09T13:46:00.965598Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Authenticated Local Sensitive Information Disclosure in HPE Networking Fabric Composer","titleSource":"hpe","descriptionSource":"hpe","description":"A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low-privileged user with local access to view sensitive information, if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain sensitive information from the affected system.","score":4.7,"severity":"medium","published":"2026-11-03T19:51:22.402Z","modified":"2026-11-09T13:46:53.379Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Fabric Composer","platforms":[],"versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.0","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.3.4","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95770"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95770","modified":"2026-11-09T13:46:53.379Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95770"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","score":4.7}],"sourceAffected":[],"observedAt":"2026-11-09T13:55:55.943Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:30:30.969Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T14:00:42.991Z","attemptedAt":"2026-11-09T14:00:42.991Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T14:00:38.958Z","attemptedAt":"2026-11-09T14:00:38.958Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T14:00:39.011Z","attemptedAt":"2026-11-09T14:00:39.011Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T14:00:38.574Z","attemptedAt":"2026-11-09T14:00:38.574Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-95770","url":"https://www.first.org/epss/","probability":0.00087,"percentile":0.00343,"date":"2026-11-08","checkedAt":"2026-11-09T14:00:38.574Z"},{"source":"GitHub Advisory Database","id":"GHSA-79m5-97p7-g89m","url":"https://github.com/advisories/GHSA-79m5-97p7-g89m","modified":"2026-11-03T21:32:17Z","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-09T14:00:38.958Z"},{"source":"ENISA EUVD","id":"EUVD-2026-116187","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116187","modified":"Nov 3, 2026, 7:51:22 PM","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-09T14:00:39.011Z"},{"source":"NVD","id":"CVE-2026-95770","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95770","modified":"2026-11-03T20:30:24.880","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-09T14:00:42.991Z"}],"aiSummary":{"text":"HPE Networking Fabric Composer versions 7.0.0 to 7.4.0 have a sensitive information disclosure vulnerability, allowing an authenticated low-privileged user with local access to view sensitive information under certain conditions. The impact is obtaining sensitive information from the affected system. Local access is required.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-09T14:01:13.006Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95770"}]}}