{"id":"CVE-2026-95759","aliases":["EUVD-2026-116176","GHSA-9jw6-3m4g-8qpx"],"status":"published","title":"Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer","description":"Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-14","score":0.00266,"percentile":0.18699,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-778"],"published":"2026-11-03T19:51:13Z","modified":"2026-11-09T18:32:53Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"fabric composer"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us\u0026docLocale=en_US"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95759"},{"url":"https://github.com/advisories/GHSA-9jw6-3m4g-8qpx"}],"sources":{"cve":[{"id":"CVE-2026-95759","title":"Authenticated Audit Log Bypass in the API of HPE Networking Fabric Composer","description":"Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.","status":"published","published":"2026-11-03T19:51:13.575Z","modified":"2026-11-09T17:50:30.212Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-778"],"updated_at":"2026-11-09T19:34:29.555364Z"}],"euvd":[{"id":"EUVD-2026-116176","description":"Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.","status":"published","published":"2026-11-03T19:51:13Z","modified":"2026-11-09T17:50:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-09T19:17:50.030863Z"}],"ghsa":[{"id":"GHSA-9jw6-3m4g-8qpx","title":"Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful...","description":"Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.","status":"published","published":"2026-11-03T21:32:16Z","modified":"2026-11-09T18:32:53Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-778"],"updated_at":"2026-11-09T18:49:20.8938Z"}],"nvd":[{"id":"CVE-2026-95759","description":"Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system.","status":"published","published":"2026-11-03T20:18:24.53Z","modified":"2026-11-09T18:17:35.86Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-778"],"updated_at":"2026-11-09T20:15:33.816361Z"}]}}