CVE-2026-957339.6Critical
Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution
Hewlett Packard Enterprise (HPE) · Fabric Composer
Not in CISA KEV
No EPSS score yet. The score appears once FIRST publishes it.
9.6CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 4 Nov.
- HPE fixes 46 Fabric Composer flaws, including a critical password bugSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.