Summary
| Parameter | Value |
|---|---|
| CVE ID | CVE-2026-95731 |
| Alert Source | GitHub Advisory - Critical Vulnerability |
| CVE Publication Year | 2026 |
| Date Published | 2026-11-03 |
| Vendor | HPE |
| Product | Networking Fabric Composer |
| CVSS Score | 9.8 (critical) |
| EPSS Score | No data |
| CISA KEV | No |
| Ransomware | Not confirmed |
Vulnerability Description
HPE bulletin hpesbnw05172 describes three critical vulnerabilities in HPE Networking Fabric Composer — software for automating and managing data center networks (HPE Aruba Networking CX fabric):
- CVE-2026-95731 (CVSS 9.8) — hardcoded passwords in the command-line interface (CLI). An unauthenticated remote attacker can log in with the built-in credentials and gain administrative access with elevated privileges.
- CVE-2026-95732 (CVSS 9.6) — an authentication bypass in the underlying operating system of Fabric Composer. An unauthenticated adjacent attacker can execute arbitrary code.
- CVE-2026-95733 (CVSS 9.6) — a vulnerability in a Fabric Composer component that allows an unauthenticated adjacent attacker to execute arbitrary code.
Required Actions
Install the fixed version listed in HPE bulletin hpesbnw05172. Until you update, restrict access to the Fabric Composer management interface and CLI to an isolated management network and trusted addresses, and block traffic from adjacent segments with ACLs. Review CLI login logs for unknown administrative sessions.
Who Is Affected?
The vulnerabilities affect HPE Networking Fabric Composer by HPE (Hewlett Packard Enterprise), used to manage data center networks built on HPE Aruba Networking CX switches. Check whether your organization or integrator runs Fabric Composer in a server room or data center.
Sources
Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.
