CVE-2026-95762
Medium · 5.9CVSS
5.9
EPSS
0.2%
Published
Nov 3, 2026
CISA due date
—
The record
An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated administrative attacker to maintain persistent access to the affected system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|