CVE Watch3 de nov. de 2026

CVE-2026-95756

A command injection vulnerability exists in the API of HPE Networking Fabric Composer and could be exploited by an authenticated remote atta

CVSS

6.6

Média

EPSS

0.7%

p53

KEV

—

Exploit Today

0-100

Publicado: 3 de nov. de 2026 · Última mod.: 3 de nov. de 2026

EPSS · 30d

0.7%EPSS · 30 dias0.7%

2026-11-042026-11-07

Descrição técnica

A command injection vulnerability exists in the API of HPE Networking Fabric Composer and could be exploited by an authenticated remote attacker with administrative privileges if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to gain elevated privileges on the underlying operating system.

Referências oficiais

support.hpe.comhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05172en_us&docLocale=en_US

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.