# Hpe Networking Fabric Composer vulnerabilities Source: https://junglewise.ai/threats/technologies/networking-fabric-composer Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/networking-fabric-composer.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 92 vulnerabilities in Hpe Networking Fabric Composer: 0 in the last 7 days and 92 in the last 90 days, 8 of them critical and 0 exploited in the wild. The most recent, CVE-2026-95772, was published on 3 November 2026. 41 vulnerabilities in the last four weeks, up from none in the four before. 3 critical against 0. ## Counts - Last 7 days: 0 - Last 30 days: 41 - Last 90 days: 92 - All time: 92 (8 critical, 0 exploited in the wild) ## About Hpe Networking Fabric Composer HPE appliance for designing and managing data center network fabric architectures. ## Latest Hpe Networking Fabric Composer vulnerabilities - [CVE-2026-95772: HPE Networking Fabric Composer API race condition](https://junglewise.ai/threats/cve-2026-95772-a-race-condition-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 4.2, published 3 Nov 2026) - [CVE-2026-95771: HPE Networking Fabric Composer information disclosure in API](https://junglewise.ai/threats/cve-2026-95771-an-authenticated-information-disclosure-vulnerability-exists-in) (medium, CVSS 4.3, published 3 Nov 2026) - [CVE-2026-95770: HPE Networking Fabric Composer information disclosure in OS](https://junglewise.ai/threats/cve-2026-95770-a-sensitive-information-disclosure-vulnerability-in-the) (medium, CVSS 4.7, published 3 Nov 2026) - [CVE-2026-95769: HPE Networking Fabric Composer audit log spoofing](https://junglewise.ai/threats/cve-2026-95769-an-audit-log-spoofing-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 5.3, published 3 Nov 2026) - [CVE-2026-95768: HPE Networking Fabric Composer API privilege escalation](https://junglewise.ai/threats/cve-2026-95768-a-privilege-escalation-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 5.3, published 3 Nov 2026) - [CVE-2026-95767: HPE Networking Fabric Composer API information disclosure](https://junglewise.ai/threats/cve-2026-95767-an-unauthenticated-information-disclosure-vulnerability-exists-in) (medium, CVSS 5.3, published 3 Nov 2026) - [CVE-2026-95766: HPE Networking Fabric Composer sensitive information disclosure](https://junglewise.ai/threats/cve-2026-95766-sensitive-information-disclosure-vulnerabilities-in-hpe) (medium, CVSS 5.3, published 3 Nov 2026) - [CVE-2026-95765: HPE Networking Fabric Composer information disclosure in web management interface](https://junglewise.ai/threats/cve-2026-95765-a-sensitive-information-disclosure-vulnerability-exists-in-the) (medium, CVSS 5.4, published 3 Nov 2026) - [CVE-2026-95764: HPE Networking Fabric Composer API improper certificate validation](https://junglewise.ai/threats/cve-2026-95764-an-improper-certificate-validation-vulnerability-exists-in-the) (medium, CVSS 5.7, published 3 Nov 2026) - [CVE-2026-95763: HPE Networking Fabric Composer improper certificate validation](https://junglewise.ai/threats/cve-2026-95763-an-improper-certificate-validation-vulnerability-in-hpe) (medium, CVSS 5.9, published 3 Nov 2026) - [CVE-2026-95762: HPE Networking Fabric Composer insufficient session expiration in API](https://junglewise.ai/threats/cve-2026-95762-an-insufficient-session-expiration-vulnerability-exists-in-the) (medium, CVSS 5.9, published 3 Nov 2026) - [CVE-2026-95761: HPE Networking Fabric Composer improper certificate validation](https://junglewise.ai/threats/cve-2026-95761-an-improper-certificate-validation-vulnerability-exists-in-hpe) (medium, CVSS 5.9, published 3 Nov 2026) - [CVE-2026-95760: HPE Networking Fabric Composer API privilege escalation](https://junglewise.ai/threats/cve-2026-95760-a-privilege-escalation-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 6.4, published 3 Nov 2026) - [CVE-2026-95759: HPE Networking Fabric Composer audit log bypass in API](https://junglewise.ai/threats/cve-2026-95759-audit-log-bypass-vulnerabilities-exist-in-the-api-of-hpe) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-95758: HPE Networking Fabric Composer API authorization bypass](https://junglewise.ai/threats/cve-2026-95758-an-authorization-bypass-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-95757: HPE Networking Fabric Composer local authentication bypass](https://junglewise.ai/threats/cve-2026-95757-a-local-authentication-bypass-vulnerability-exists-in-an-api-of) (medium, CVSS 6.5, published 3 Nov 2026) - [CVE-2026-95756: HPE Networking Fabric Composer API command injection](https://junglewise.ai/threats/cve-2026-95756-a-command-injection-vulnerability-exists-in-the-api-of-hpe) (medium, CVSS 6.6, published 3 Nov 2026) - [CVE-2026-95755: HPE Networking Fabric Composer improper certificate validation](https://junglewise.ai/threats/cve-2026-95755-improper-certificate-validation-vulnerabilities-in-the-affected) (medium, CVSS 6.8, published 3 Nov 2026) - [CVE-2026-95753: HPE Networking Fabric Composer API privilege escalation](https://junglewise.ai/threats/cve-2026-95753-a-privilege-escalation-vulnerability-exists-in-the-api-of-hpe) (high, CVSS 7.1, published 3 Nov 2026) - [CVE-2026-95752: HPE Networking Fabric Composer API local privilege escalation](https://junglewise.ai/threats/cve-2026-95752-a-local-privilege-escalation-vulnerability-exists-in-the-api-of) (high, CVSS 7.1, published 3 Nov 2026) - [CVE-2026-95751: HPE Networking Fabric Composer certificate validation bypass in API](https://junglewise.ai/threats/cve-2026-95751-an-improper-certificate-validation-vulnerability-in-the-api-of) (high, CVSS 7.4, published 3 Nov 2026) - [CVE-2026-95750: HPE Networking Fabric Composer improper certificate validation](https://junglewise.ai/threats/cve-2026-95750-an-improper-certificate-validation-vulnerability-in-hpe) (high, CVSS 7.5, published 3 Nov 2026) - [CVE-2026-95749: HPE Networking Fabric Composer missing integrity verification](https://junglewise.ai/threats/cve-2026-95749-a-missing-integrity-verification-vulnerability-exists-in-hpe) (high, CVSS 7.5, published 3 Nov 2026) - [CVE-2026-95748: HPE Networking Fabric Composer SQL injection](https://junglewise.ai/threats/cve-2026-95748-a-sql-injection-vulnerability-exists-in-hpe-networking-fabric) (high, CVSS 7.5, published 3 Nov 2026) - [CVE-2026-95747: HPE Networking Fabric Composer privilege escalation in SSH](https://junglewise.ai/threats/cve-2026-95747-a-privilege-escalation-vulnerability-exists-in-the-ssh-interface) (high, CVSS 7.5, published 3 Nov 2026) ## Most severe Hpe Networking Fabric Composer vulnerabilities - [CVE-2026-76658: HPE Networking Fabric Composer SSH daemon auth bypass](https://junglewise.ai/threats/cve-2026-76658-hpe-networking-fabric-composer-ssh-daemon-auth-bypass) (critical, CVSS 10, published 1 Sep 2026) - [CVE-2026-76657: HPE Networking Fabric Composer API authentication bypass](https://junglewise.ai/threats/cve-2026-76657-hpe-networking-fabric-composer-api-authentication-bypass) (critical, CVSS 10, published 1 Sep 2026) - [CVE-2026-95731: HPE Networking Fabric Composer hardcoded password in CLI](https://junglewise.ai/threats/cve-2026-95731-hardcoded-password-vulnerabilities-in-the-command-line-interface) (critical, CVSS 9.8, published 3 Nov 2026) - [CVE-2026-19766: HPE Networking Fabric Composer authentication bypass in OS](https://junglewise.ai/threats/cve-2026-19766-hpe-networking-fabric-composer-authentication-bypass-in-os) (critical, CVSS 9.6, published 1 Sep 2026) - [CVE-2026-95733: HPE Networking Fabric Composer arbitrary code execution](https://junglewise.ai/threats/cve-2026-95733-a-vulnerability-exists-in-a-component-of-hpe-networking-fabric) (critical, CVSS 9.6, published 3 Nov 2026) - [CVE-2026-95732: HPE Networking Fabric Composer authentication bypass in OS](https://junglewise.ai/threats/cve-2026-95732-an-authentication-bypass-vulnerability-exists-in-the-underlying) (critical, CVSS 9.6, published 3 Nov 2026) - [CVE-2026-73701: HPE Networking Fabric Composer unauthenticated remote code execution](https://junglewise.ai/threats/cve-2026-73701-hpe-networking-fabric-composer-unauthenticated-remote-code) (critical, CVSS 9, published 1 Sep 2026) - [CVE-2026-73700: HPE Networking Fabric Composer stored cross-site scripting in management interface](https://junglewise.ai/threats/cve-2026-73700-hpe-networking-fabric-composer-stored-cross-site-scripting-in) (critical, CVSS 9, published 1 Sep 2026) - [CVE-2026-73705: HPE Networking Fabric Composer arbitrary file write in API](https://junglewise.ai/threats/cve-2026-73705-hpe-networking-fabric-composer-arbitrary-file-write-in-api) (high, CVSS 8.8, published 1 Sep 2026) - [CVE-2026-73704: HPE Networking Fabric Composer command sanitization bypass in API](https://junglewise.ai/threats/cve-2026-73704-hpe-networking-fabric-composer-command-sanitization-bypass-in-api) (high, CVSS 8.8, published 1 Sep 2026) ## Vulnerabilities per week 41 vulnerabilities in the last four weeks, up from none in the four before. 3 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 51 | 5 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 41 | 3 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Hpe technologies - [Hpe EdgeConnect SD-WAN Gateway](https://junglewise.ai/threats/technologies/edgeconnect-sd-wan-gateway): 16 vulnerabilities - [Hpe ClearPass Policy Manager](https://junglewise.ai/threats/technologies/hpe-clearpass-policy-manager): 12 vulnerabilities - [Hpe Analytics and Location Engine](https://junglewise.ai/threats/technologies/analytics-and-location-engine): 9 vulnerabilities - [Hpe Networking Instant On](https://junglewise.ai/threats/technologies/networking-instant-on): 9 vulnerabilities - [Hpe Arubaos-Cx](https://junglewise.ai/threats/technologies/arubaos-cx): 6 vulnerabilities - [Hpe AOS-S](https://junglewise.ai/threats/technologies/hpe-aos-s): 5 vulnerabilities - [Hpe ](https://junglewise.ai/threats/technologies/hpe-unknown): 4 vulnerabilities - [Hpe Networking Instant ON APs](https://junglewise.ai/threats/technologies/networking-instant-on-aps): 4 vulnerabilities - [Hpe Networking VIA](https://junglewise.ai/threats/technologies/networking-via): 4 vulnerabilities - [Hpe EdgeConnect SD-WAN Orchestrator](https://junglewise.ai/threats/technologies/hpe-edgeconnect-sd-wan-orchestrator): 3 vulnerabilities - [Hpe OneView](https://junglewise.ai/threats/technologies/hpe-oneview): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Hpe Networking Fabric Composer vulnerabilities", https://junglewise.ai/threats/technologies/networking-fabric-composer, 11 November 2026.