Skip to content
Sign in

Hewlett Packard Enterprise (HPE) product

Fabric Composer

Alert
No Fabric Composer CVE is in the CISA KEV catalogue.

Tracked since 2 Sep · latest article 4 Nov · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

1Articles · 7 days

usual rate

Exploited, by due date

No Fabric Composer CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds Fabric Composer CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a Fabric Composer CVE to KEV.

Fix listed

0 of 2 CVEs in coverage

2 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-76658: 54.9th percentileCVE-2026-76657: 54.9th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-7665854.9
CVE-2026-7665754.9

Coverage2 articles · all time

The latest 2 articles naming Fabric Composer, in the shared story grammar.

Full timeline
Developinglatest 2 hours ago2 articles1 outlet

2 articles from 1 outlet since 2 Sep. Picked up again today after 9 weeks quiet.

Now2 Sep2First reportSecurityOnline · 2 Sep, 01:36Picked up againafter 9 weeks quiet
  • Wed 2 Sep, 01:36 UTC. SecurityOnline, first report. HPE Fabric Composer Vulnerabilities Expose Critical Systems.
  • Wed 4 Nov, 03:30 UTC. SecurityOnline. HPE fixes 46 Fabric Composer flaws, including a critical password bug.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 2 articles as a list
  1. Wed 2 SepDay 01
    1. HPE Fabric Composer Vulnerabilities Expose Critical Systems01:36 · SecurityOnline · First report

  2. Quiet for 9 weeks

    Wed 4 NovDay 631
    1. HPE fixes 46 Fabric Composer flaws, including a critical password bug03:30 · SecurityOnline · Picked up again

All CVEs in coverage2

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-76658

    Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon

    10.0Critical0.8% EPSS · 1 article
  • CVE-2026-76657

    Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access

    10.0Critical0.8% EPSS · 1 article
  • CVE-2026-95733

    Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution

    9.6Critical1 article
  • CVE-2026-95732

    Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution

    9.6Critical1 article
  • CVE-2026-95731

    Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

    9.8Critical1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in