{"id":"CVE-2026-95772","aliases":["EUVD-2026-116189","GHSA-v256-34r4-j75q"],"status":"published","title":"Authenticated Race Condition in API of HPE Networking Fabric Composer","description":"A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to corrupt the configuration state of the affected system.","severity":{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-14","score":0.00126,"percentile":0.02374,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362"],"published":"2026-11-03T19:51:24Z","modified":"2026-11-09T13:49:29Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"fabric composer"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us\u0026docLocale=en_US"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95772"},{"url":"https://github.com/advisories/GHSA-v256-34r4-j75q"}],"sources":{"cve":[{"id":"CVE-2026-95772","title":"Authenticated Race Condition in API of HPE Networking Fabric Composer","description":"A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to corrupt the configuration state of the affected system.","status":"published","published":"2026-11-03T19:51:24.161Z","modified":"2026-11-09T13:49:29.531Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-362"],"updated_at":"2026-11-09T14:33:34.013968Z"}],"euvd":[{"id":"EUVD-2026-116189","description":"A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to corrupt the configuration state of the affected system.","status":"published","published":"2026-11-03T19:51:24Z","modified":"2026-11-09T13:49:29Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-09T15:17:14.169746Z"}],"ghsa":[{"id":"GHSA-v256-34r4-j75q","title":"A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful...","description":"A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to corrupt the configuration state of the affected system.","status":"published","published":"2026-11-03T21:32:16Z","modified":"2026-11-09T15:31:54Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-362"],"updated_at":"2026-11-09T15:48:41.634645Z"}],"nvd":[{"id":"CVE-2026-95772","description":"A race condition vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to corrupt the configuration state of the affected system.","status":"published","published":"2026-11-03T20:18:26.11Z","modified":"2026-11-09T14:17:24.317Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-362"],"updated_at":"2026-11-09T16:14:54.646036Z"}]}}