HPE Networking Fabric Composer EUVD-2026-116279

Exploitation requires the attacker to hold a man-in-the-middle position on the network path to HPE Networking Fabric Composer so that a forged or invalid TLS certificate can be presented to the product's flawed validation routine - this is the 'certain preconditions outside the attacker's control' noted in the description and the basis for CVSS AC:H. No authentication is required (PR:N per the provided vector) and no user interaction is needed (UI:N). The principal limiting factor is the need to already intercept or redirect the targeted TLS connection; without that intermediary position the certificate-validation weakness cannot be reached, which constrains realistic risk well below the raw network-vector score.

This is an improper certificate validation flaw in HPE Networking Fabric Composer, scored CVSS 8.7 with vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N. The signals are mixed: the network vector (AV:N) and lack of required privileges (PR:N) raise exposure, but high attack complexity (AC:H) - consistent with the description's explicit 'certain preconditions outside the attacker's control' - materially lowers real-world exploitability, since the attacker must achieve a privileged network position (e.g. a man-in-the-middle vantage) rather than simply reaching the service. No EPSS score, no CISA KEV listing, and no proof-of-concept were supplied, so there is no public exploit identified at time of analysis and no evidence of active exploitation. The vuln.today decision label is 'this_week', indicating an elevated-but-not-emergency priority consistent with a credential-exposure bug gated behind a non-trivial precondition. Note a scoring discrepancy to verify: the stated score 8.7 does not correspond to the provided CVSS 3.1 vector (which computes higher), suggesting 8.7 may be a separately-derived CVSS 4.0 figure - confirm the authoritative score against HPE advisory hpesbnw05172en_us. Net: a credible confidentiality/integrity risk worth prompt patching, but not a mass-exploitation emergency given AC:H and absence of exploit signals.

An attacker positioned on the network path between a client and HPE Networking Fabric Composer (for example via ARP/DNS spoofing or a rogue intermediary) presents a fraudulent TLS certificate that the product fails to properly validate, allowing interception of the session. The attacker thereby captures sensitive information in transit, including credentials, which could enable follow-on access to the fabric management plane. No public exploit code is identified at time of analysis; success depends on the attacker first obtaining the man-in-the-middle position implied by the CVSS AC:H metric.