CVE-2026-95776
Last modified
CVE-2026-95776 is a low-severity vulnerability rated 3.1/10 on the CVSS scale. An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to read certain files on the underlying operating system..
Description
An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to read certain files on the underlying operating system.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | Fabric Composer | >= 7.4.0, <= 7.4.0; >= 7.0.0, <= 7.3.4 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-95776?
How severe is CVE-2026-95776?
How do I fix CVE-2026-95776?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-95770A sensitive information disclosure vulnerability in the unde…4.7
- CVE-2026-95771An authenticated information disclosure vulnerability exists…4.3
- CVE-2026-95772A race condition vulnerability exists in the API of HPE Netw…4.2
- CVE-2026-95773A denial-of-service vulnerability has been identified in HPE…3.8
- CVE-2026-95774A sensitive information disclosure vulnerability exists in H…3.7
- CVE-2026-95775A local information disclosure vulnerability exists in the u…3.3
- CVE-2026-95777A sensitive information disclosure vulnerability exists in t…3.1
- CVE-2026-9579A vulnerability was found in JeecgBoot up to 3.9.1. Impacted…6.3
- CVE-2026-9580A vulnerability was determined in JeecgBoot up to 3.9.1. The…7.3
- CVE-2026-95805A typo in the MISP ACLComponent access control configuration…5.3
- CVE-2026-95806MISP ships with PHP's phar stream wrapper registered in both…7.7
- CVE-2026-95807The FV Player 8 plugin for WordPress is vulnerable to Stored…6.4
Are you affected by CVE-2026-95776?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST