{"id":"CVE-2026-95732","published":"2026-11-03T20:18:21.320","lastModified":"2026-11-03T20:30:24.880","description":"An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An unauthenticated adjacent attacker can bypass authentication on HPE Networking Fabric Composer's underlying OS and execute arbitrary code due to a flaw in the OS-level authentication mechanism.","exploitability":"Exploitation requires adjacent network access (Layer 2) and no privileges or user interaction, making it highly exploitable by local attackers within broadcast domain.","blast_radius":"Successful exploitation grants full system compromise—confidentiality, integrity, and availability loss—potentially enabling lateral movement across the network fabric infrastructure.","remediation":"Upgrade to HPE Networking Fabric Composer firmware version 2.590 or later, as specified in vendor advisories for CVE-2026-95732.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","adjacent-access","rce","networking-device"],"model":"garnet-coder","analyzedAt":"2026-11-04T09:49:38.640Z"}}