CVE-2026-95776
Low · 3.1CVSS
3.1
EPSS
0.2%
Published
Nov 3, 2026
CISA due date
—
The record
An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to read certain files on the underlying operating system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|