{"id":"CVE-2026-95733","published":"2026-11-03T20:18:21.433","lastModified":"2026-11-03T20:30:24.880","description":"A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An unauthenticated adjacent attacker can execute arbitrary code on HPE Networking Fabric Composer systems, indicating a critical remote code execution flaw likely rooted in improper input validation or insecure default configurations accessible over the local network.","exploitability":"Exploitation requires the attacker to be on the same adjacent network segment (Layer 2) with no authentication or user interaction needed, making it highly exploitable for insiders or compromised devices within proximity.","blast_radius":"Successful exploitation grants full system compromise—confidentiality, integrity, and availability impact—potentially enabling lateral movement across the entire network fabric managed by the composer.","remediation":"Upgrade HPE Networking Fabric Composer to version 2.590 or later, as this is the fixed version specified in the CVE description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","adjacent-network","no-auth","ics"],"model":"garnet-coder","analyzedAt":"2026-11-04T09:49:48.699Z"}}