PT-2026-136385
CVE-2026-95731
·
Published
2026-11-03
·
Updated
2026-11-04
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
HPE Networking Fabric Composer versions prior to 7.4.0
Description
The command-line interface contains hardcoded credentials that allow an unauthenticated remote attacker to gain unauthorized administrative access to the affected system with elevated privileges, potentially granting full control over the data center fabric.
Recommendations
Apply bulletin HPESBNW05172 for versions prior to 7.4.0.
Found an issue in the description? Have something to add? Feel free to write us 👾