{"id":"CVE-2026-95766","aliases":["EUVD-2026-116183","GHSA-mxvj-f892-p27v"],"status":"published","title":"Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer","description":"Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-14","score":0.00189,"percentile":0.08592,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2026-11-03T19:51:18Z","modified":"2026-11-09T13:22:37Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"fabric composer"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us\u0026docLocale=en_US"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95766"},{"url":"https://github.com/advisories/GHSA-mxvj-f892-p27v"}],"sources":{"cve":[{"id":"CVE-2026-95766","title":"Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer","description":"Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information.","status":"published","published":"2026-11-03T19:51:18.964Z","modified":"2026-11-09T13:22:37.873Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-09T14:33:34.013968Z"}],"euvd":[{"id":"EUVD-2026-116183","description":"Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information.","status":"published","published":"2026-11-03T19:51:18Z","modified":"2026-11-09T13:22:37Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-09T15:17:14.169746Z"}],"ghsa":[{"id":"GHSA-mxvj-f892-p27v","title":"Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an...","description":"Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information.","status":"published","published":"2026-11-03T21:32:16Z","modified":"2026-11-09T15:32:59Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-09T15:48:42.843855Z"}],"nvd":[{"id":"CVE-2026-95766","description":"Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information.","status":"published","published":"2026-11-03T20:18:25.38Z","modified":"2026-11-09T14:17:23.457Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-09T16:14:54.646036Z"}]}}