CVE-2026-95731

Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer…

Risk score: 64/100
CVSS: 9.8 v3.1
Published: 3 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: A hardcoded password vulnerability in HPE Networking Fabric Composer's command-line interface allows an unauthenticated remote attacker to access the system with elevated privileges.
Affected: {'products': ['HPE Networking Fabric Composer'], 'packages': [], 'versions': []}
Fix: Check the linked advisory for details on the fix.
Exploitation: No known exploitation

Why it is Amber

CVSS 9.8 critical
Remotely exploitable without logging in

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US

Original description

Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. Successful exploitation could allow an attacker to gain unauthorized administrative access to the affected system with elevated privileges.

Last activity 3 Nov 2026. Patch Forecast updates every hour.