CVE-2026-95757

Medium · 6.5

CVSS

6.5

EPSS

0.1%

Published

Nov 3, 2026

CISA due date

—

The record

A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with low privileges to write arbitrary files to remote servers configured on the affected system.

Affected packages

Ecosystem	Package	Introduced	Fixed