{"id":"CVE-2026-95753","aliases":["EUVD-2026-116171","GHSA-5fq5-5wfx-7q6c"],"status":"published","title":"Privilege Escalation in HPE Networking Fabric Composer API","description":"A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to disclose network traffic from switches managed by Fabric Composer.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-14","score":0.0022,"percentile":0.12739,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2026-11-03T19:51:09Z","modified":"2026-11-09T12:55:14Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"fabric composer"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us\u0026docLocale=en_US"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95753"},{"url":"https://github.com/advisories/GHSA-5fq5-5wfx-7q6c"}],"sources":{"cve":[{"id":"CVE-2026-95753","title":"Privilege Escalation in HPE Networking Fabric Composer API","description":"A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to disclose network traffic from switches managed by Fabric Composer.","status":"published","published":"2026-11-03T19:51:09.794Z","modified":"2026-11-09T12:55:14.344Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-269"],"updated_at":"2026-11-09T13:33:21.542257Z"}],"euvd":[{"id":"EUVD-2026-116171","description":"A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to disclose network traffic from switches managed by Fabric Composer.","status":"published","published":"2026-11-03T19:51:09Z","modified":"2026-11-09T12:55:14Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"updated_at":"2026-11-09T15:17:14.840893Z"}],"ghsa":[{"id":"GHSA-5fq5-5wfx-7q6c","title":"A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer....","description":"A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to disclose network traffic from switches managed by Fabric Composer.","status":"published","published":"2026-11-03T21:32:15Z","modified":"2026-11-09T15:31:54Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-09T15:48:41.634645Z"}],"nvd":[{"id":"CVE-2026-95753","description":"A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to disclose network traffic from switches managed by Fabric Composer.","status":"published","published":"2026-11-03T20:18:23.913Z","modified":"2026-11-09T13:17:11.59Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-09T16:14:54.646036Z"}]}}