CVE-2026-95771

Medium · 4.3

CVSS

4.3

EPSS

0.2%

Published

Nov 3, 2026

CISA due date

—

The record

An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated remote attacker to obtain limited information about the affected system.

Affected packages

Ecosystem	Package	Introduced	Fixed