7.5
High
CVE-2026-95748 A SQL injection vulnerability exists in HPE Networking Fabric Composer
Description
A SQL injection vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to run arbitrary database commands.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fabric Composer | 7.4.0 | No fix stated |
| Fabric Composer 7.0 | 7.0.0 → 7.3.4 | No fix stated |
Other CVEs of Fabric Composer
The 98 CVEs of Fabric Composer →
CVE-2026-95777
A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer
3.1
Low
CVE-2026-95776
An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…
3.1
Low
CVE-2026-95775
A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer
3.3
Low
CVE-2026-95774
A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer
3.7
Low