CVE-2026-95765 is a medium severity vulnerability in the web-based management interface of HPE Networking Fabric Composer. It allows an unauthenticated remote attacker to disclose sensitive information. The affected versions are 7.0.0 through 7.3.4 and version 7.4.0. No public exploits or patches are currently documented.
CVE-2026-95764 is an improper certificate validation vulnerability in the API of HPE Networking Fabric Composer. It allows an unauthenticated adjacent attacker to potentially access sensitive information. The vulnerability affects versions 7.0.0 through 7.4.0 inclusive. The CVSS score is 5.7, indicating a medium severity impact primarily on confidentiality. No public exploits or patches are currently documented.
CVE-2026-95763 is a medium severity vulnerability in HPE Networking Fabric Composer involving improper certificate validation. An unauthenticated remote attacker could exploit this flaw to access sensitive information, including intercepted transferred files and stored credentials for remote servers, if certain external conditions are met.
CVE-2026-95762 is an authenticated insufficient session expiration vulnerability in the API of HPE Networking Fabric Composer. It affects versions from 7.0.0 through 7.4.0. An authenticated administrative attacker could exploit this flaw to maintain persistent access if certain conditions outside their control are met. The vulnerability has a medium severity rating with a CVSS score of 5.9.
CVE-2026-95761 is an authenticated improper certificate validation vulnerability in HPE Networking Fabric Composer. An attacker with low privileges who is authenticated could exploit this flaw to disclose sensitive information. The vulnerability affects versions from 7.0.0 up to and including 7.4.0. The CVSS score is 5.9, indicating a medium severity level.
CVE-2026-95760 is a privilege escalation vulnerability in the API of HPE Networking Fabric Composer. It requires certain preconditions outside the attacker's control to be met. An authenticated attacker with low privileges could exploit this flaw to gain elevated privileges on the affected system. The vulnerability affects Fabric Composer versions from 7.0.0 through 7.4.0 inclusive. The CVSS v3.1 base score is 6.4, indicating a medium severity level.
CVE-2026-95759 is an authenticated audit log bypass vulnerability in the API of HPE Networking Fabric Composer. An attacker with low privileges who is authenticated could exploit this flaw to suppress audit records of their actions. This vulnerability affects Fabric Composer versions from 7.0.0 up to and including 7.4.0. The CVSS score is 6.5, indicating a medium severity impact primarily due to the integrity impact of suppressed audit logs.
CVE-2026-95758 is an authorization bypass vulnerability in the API of HPE Networking Fabric Composer. An authenticated attacker could exploit this flaw to bypass security restrictions and modify protected resources. The vulnerability affects versions from 7.0.0 up to and including 7.4.0. The CVSS score is 6.5, indicating a medium severity impact primarily on integrity. No public exploits or known active exploitation have been reported.
CVE-2026-95757 is a local authentication bypass vulnerability in the API of HPE Networking Fabric Composer. It allows a low-privileged local attacker to write arbitrary files to remote servers configured on the affected system. The vulnerability affects Fabric Composer versions from 7.0.0 up to and including 7.4.0. The CVSS 3.1 base score is 6.5, indicating a medium severity level. No public exploits or known active exploitation have been reported. No patch or remediation information is provided in the available data.
CVE-2026-95756 is an authenticated command injection vulnerability in the API of HPE Networking Fabric Composer. It requires an attacker to have administrative privileges and certain external conditions to be met. Exploitation could allow privilege escalation on the underlying operating system. The vulnerability affects Fabric Composer versions from 7.0.0 up to and including 7.4.0. The CVSS score is 6.6, indicating a medium severity level.
CVE-2026-95755 is an improper certificate validation vulnerability in HPE Networking Fabric Composer. It allows an unauthenticated adjacent attacker to intercept management traffic under certain conditions. Exploitation could lead to disclosure of sensitive information. The vulnerability affects versions 7.0.0 through 7.4.0 inclusive. The CVSS score is 6.8, indicating a medium severity impact.
CVE-2026-95753 is a privilege escalation vulnerability in the API of HPE Networking Fabric Composer. An authenticated attacker with low privileges could exploit this flaw to disclose network traffic from switches managed by Fabric Composer. The vulnerability affects versions 7.0.0 through 7.4.0 inclusive. It has a CVSS 3.1 score of 7.1, indicating high severity.
CVE-2026-95752 is a local privilege escalation vulnerability in the API of HPE Networking Fabric Composer. It allows a low-privileged local attacker to elevate their privileges on the affected system. The vulnerability affects versions 7.0.0 through 7.4.0 inclusive. The CVSS v3.1 base score is 7.1, indicating high severity with impact on integrity and availability but no confidentiality impact.
CVE-2026-95751 is a high-severity vulnerability in HPE Networking Fabric Composer's API where improper certificate validation can allow an unauthenticated remote attacker to bypass authentication controls under certain conditions. Exploiting this flaw could grant unauthorized access to the system.
CVE-2026-95750 is an improper certificate validation vulnerability in HPE Networking Fabric Composer. It allows an unauthenticated remote attacker to potentially access sensitive information, including credentials, if certain external preconditions are met. The vulnerability affects versions 7.0.0 through 7.4.0 inclusive. The CVSS score is 7.5, indicating a high severity impact primarily on confidentiality. No public exploits or patches are currently documented.
CVE-2026-95749 is a high-severity vulnerability in HPE Networking Fabric Composer involving missing integrity verification. This flaw allows an unauthenticated remote attacker to potentially execute arbitrary code on affected systems running versions 7.0.0 through 7.4.0. The vulnerability requires user interaction and has a high attack complexity. No public exploits or known active exploitation have been reported.
CVE-2026-95748 is a high-severity SQL injection vulnerability in HPE Networking Fabric Composer. It allows an unauthenticated attacker with adjacent network access to execute arbitrary database commands. The affected versions include 7.0.0 through 7.3.4 and version 7.4.0. The vulnerability has a CVSS score of 7.5, indicating significant impact on confidentiality, integrity, and availability.
CVE-2026-63434 is an improper input validation vulnerability in franklioxygen MyTube versions prior to 1.10.6. When statistics tracking features are enabled, visitor-role users can submit fabricated event data to the statistics ingest endpoint without server-side validation of certain fields. This allows attackers to corrupt analytics data such as view counts, download counts, platform breakdowns, source attribution, and session analytics. The issue is fixed in version 1.10.6.
CVE-2026-95747 is a privilege escalation vulnerability in the SSH interface of HPE Networking Fabric Composer. It allows an authenticated low-privileged attacker to potentially gain unauthorized access to internal services if certain external conditions are met. The vulnerability affects versions from 7.0.0 up to and including 7.4.0. The CVSS 3.1 base score is 7.5, indicating high severity.
CVE-2026-95746 is an authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer. It allows an unauthenticated adjacent attacker to bypass authentication controls if certain external conditions are met. Exploitation could lead to unauthorized access with high impact on confidentiality, integrity, and availability. The affected versions are 7.0.0 through 7.4.0 inclusive. The vulnerability has a high severity score of 7.5. No public exploits or patches are currently documented.