CVE-2026-95767

A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged attacker to obtain certain sensitive information stored on the affected system.

An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, exploitable by an authenticated low-privileged user if certain preconditions outside the attacker's control are met. Successful exploitation could allow reading certain files on the underlying operating system.

A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged local attacker to read certain files on the underlying operating system.

A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information from the affected system.

A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a low-privileged local attacker to cause a partial denial-of-service condition affecting other workloads on the same host.

A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to corrupt the configuration state of the affected system.

An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated remote attacker to obtain limited information about the affected system.

A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer. An authenticated low-privileged user with local access could view sensitive information if certain preconditions outside the attacker's control are met.

An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. An unauthenticated remote attacker could falsify the client address recorded in audit records.

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside the attacker's control are met. An authenticated low-privileged remote attacker could obtain sensitive information from the affected system.