{"id":"CVE-2026-95736","aliases":["EUVD-2026-116280","GHSA-c4rp-565m-whvq"],"status":"published","title":"Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking Fabric Composer","description":"Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept sensitive information.","severity":{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-14","score":0.00096,"percentile":0.00673,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-295"],"published":"2026-11-03T19:50:53Z","modified":"2026-11-09T12:25:04Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"fabric composer"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us\u0026docLocale=en_US"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95736"},{"url":"https://github.com/advisories/GHSA-c4rp-565m-whvq"}],"sources":{"cve":[{"id":"CVE-2026-95736","title":"Unauthenticated Adjacent Improper Certificate Validation Vulnerabilities in HPE Networking Fabric Composer","description":"Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept sensitive information.","status":"published","published":"2026-11-03T19:50:53.587Z","modified":"2026-11-09T12:25:04.654Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-295"],"updated_at":"2026-11-09T13:33:21.542257Z"}],"euvd":[{"id":"EUVD-2026-116280","description":"Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept sensitive information.","status":"published","published":"2026-11-03T19:50:53Z","modified":"2026-11-09T12:25:04Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-09T13:16:54.716788Z"}],"ghsa":[{"id":"GHSA-c4rp-565m-whvq","title":"Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking...","description":"Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept sensitive information.","status":"published","published":"2026-11-03T21:32:15Z","modified":"2026-11-09T15:31:53Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-295"],"updated_at":"2026-11-09T15:48:41.634645Z"}],"nvd":[{"id":"CVE-2026-95736","description":"Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept sensitive information.","status":"published","published":"2026-11-03T20:18:21.79Z","modified":"2026-11-09T13:17:10.17Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-295"],"updated_at":"2026-11-09T16:14:54.646036Z"}]}}