CVE-2026-95731: Hardcoded Credentials in HPE Fabric Composer

CVE-2026-95731 describes a hardcoded credential vulnerability in the command-line interface (CLI) of HPE Networking Fabric Composer. It affects network infrastructure management software used in data centers and enterprise fabric environments. The vulnerability allows an unauthenticated remote attacker to access affected systems using credentials embedded directly in the code, obtaining full administrative privileges.

The vulnerability is classified with critical severity: CVSS 9.8 according to official data. Social signals on X show four posts within 24 hours starting from November 3, 2026 (NVD publication date) with consistency on the reported CVSS score. The status of patch availability is not confirmed in official data; social signals mention an HPE bulletin but this information does not come from a verified source.

Administrators must contact HPE to verify patch availability and official guidance. In the short term, it is advisable to limit remote access to the CLI service through network segmentation, firewalls, and access controls. Review access logs to Fabric Composer systems to detect any unauthorized access attempts. Monitor HPE communications for security updates and released bulletins.