CVE-2026-95740
High · 8.0CVSS
8.0
EPSS
0.1%
Published
Nov 3, 2026
CISA due date
—
The record
An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept communications between the affected system and remote servers if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain sensitive information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|