---
cve: "CVE-2026-95731"
severity: "CRITICAL"
cvss: 9.8
epss: "0.5%"
vendor: "Hewlett Packard Enterprise (HPE)"
kev: false
exploited: false
published: "2026-11-03 20:18:21"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-11-09T18:38:06+01:00"
---

# CVE-2026-95731

> 9.8 CRITICAL

## Beschreibung

Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. Successful exploitation could allow an attacker to gain unauthorized administrative access to the affected system with elevated privileges.

## CNA-Record (Kanon, cvelistV5)

- CNA: **hpe**
- State: PUBLISHED
- Stand: 2026-11-03 19:50:49
- CNA-CVSS: **9.8** (`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`)

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-95731/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_