{"id":"CVE-2026-95771","aliases":[],"cve":{"records":[{"id":"CVE-2026-95771","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:54:32.623Z","published":"2026-11-03T19:51:23.288Z","modified":"2026-11-09T13:47:43.628Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-03T19:51:23.288Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-09T13:47:43.628Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[{"id":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-09T13:47:09.996032Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Authenticated Information Disclosure in HPE Networking Fabric Composer API Endpoint","titleSource":"hpe","descriptionSource":"hpe","description":"An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated remote attacker to obtain limited information about the affected system.","score":4.3,"severity":"medium","published":"2026-11-03T19:51:23.288Z","modified":"2026-11-09T13:47:43.628Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Fabric Composer","platforms":[],"versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.0","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.3.4","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95771"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95771","modified":"2026-11-09T13:47:43.628Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95771"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":4.3}],"sourceAffected":[],"observedAt":"2026-11-09T13:55:59.532Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T01:25:32.844Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T14:00:37.375Z","attemptedAt":"2026-11-09T14:00:37.375Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T14:00:37.746Z","attemptedAt":"2026-11-09T14:00:37.746Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T14:00:37.931Z","attemptedAt":"2026-11-09T14:00:37.931Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T14:00:37.589Z","attemptedAt":"2026-11-09T14:00:37.589Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-95771","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95771","modified":"2026-11-03T20:30:24.880","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-09T14:00:37.375Z"},{"source":"FIRST EPSS","id":"CVE-2026-95771","url":"https://www.first.org/epss/","probability":0.00215,"percentile":0.11928,"date":"2026-11-08","checkedAt":"2026-11-09T14:00:37.589Z"},{"source":"GitHub Advisory Database","id":"GHSA-j2pf-79hj-ghw9","url":"https://github.com/advisories/GHSA-j2pf-79hj-ghw9","modified":"2026-11-03T21:32:22Z","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-09T14:00:37.746Z"},{"source":"ENISA EUVD","id":"EUVD-2026-116188","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116188","modified":"Nov 3, 2026, 7:51:23 PM","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-09T14:00:37.931Z"}],"aiSummary":{"text":"An authenticated information disclosure vulnerability in HPE Networking Fabric Composer API endpoint could allow an authenticated remote attacker to obtain limited system information. Versions 7.0.0 to 7.3.4 and 7.4.0 are affected. The weakness is exposure of sensitive information.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-09T14:01:14.978Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95771"}]}}