CVE-2026-73727 Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A successful exploit allows an attacker to access data beyond what is authorized by the user's existing privilege level, which could be used to...

EUVD-2026-69454

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A successful exploit allows an attacker to access data beyond what is authorized by the user's existing privilege level, which could be used to...

CVE-2026-73726

CVE-2026-73726 affects the underlying operating system of HPE Networking Fabric Composer , allowing an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation grants an attacker administrative access , the ability to modify system configurations , an...

EUVD-2026-69453

A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access,...

CVE-2026-73725 Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric Composer

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges, leading to a complete compromise of the affected host...

CVE-2026-73725

CVE-2026-73725 is a local privilege-escalation vulnerability in HPE Networking Fabric Composer that, when successfully exploited, allows a local attacker with low privileges to achieve arbitrary code execution with root , resulting in complete compromise of the affected host. The CVSS 3.1 base sc...

EUVD-2026-69452

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges, leading to a complete compromise of the affected host...

CVE-2026-73724 Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

CVE-2026-73724

Privilege escalation vulnerabilities in the API of HPE Networking Fabric Composer stem from broken access control , allowing an authenticated low-privilege operator user to change the state of certain system settings. The CVSS 3.1 score is 7.1 (HIGH) with high integrity and low availability impac...

EUVD-2026-69451

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

CVE-2026-73723 Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interface

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorizati...

CVE-2026-73723

HPE Networking Fabric Composer contains a privilege escalation vulnerability in its web-based management interface . An authenticated user with low-privilege operator access can perform state-changing actions that exceed their authorized permission level. The flaw is network-reachable with low at...

EUVD-2026-69450

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorizati...

CVE-2026-73722

CVE-2026-73722 affects the web-based management interface of HPE Networking Fabric Composer . Command injection vulnerabilities allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system, leading to full compromise of confidentiali...

CVE-2026-73722 Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...

EUVD-2026-69449

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-73721 Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric Composer

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the...

CVE-2026-73721

CVE-2026-73721 describes SQL injection vulnerabilities in the API of HPE Networking Fabric Composer . An authenticated remote attacker can exploit these flaws to obtain and modify sensitive data in the underlying database, potentially leading to complete compromise of the host . The CNA-assigned ...

EUVD-2026-69448

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the...

CVE-2026-73720 Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system...