CVE-2026-73736

CVE-2026-73736 is an unauthenticated information disclosure vulnerability in the web-based management interface of HPE Networking Fabric Composer . A remote attacker with no prior authentication can view and read files within an affected directory, leading to potential data exposure. The CVSS v3....

CVE-2026-73735

CVE-2026-73735 is an access control vulnerability in the API of HPE Networking Fabric Composer that allows an authenticated low-privilege operator user to read or modify data beyond the scope of their assigned permissions. The impact is rated MEDIUM (CVSS 3.1: 5.4) with low confidentiality and in...

CVE-2026-73734

An unauthenticated open redirect vulnerability exists in the web-based management interface of HPE Networking Fabric Composer , allowing a remote attacker to redirect users to an arbitrary URL. The vulnerability requires user interaction but no prior authentication, carrying a CVSS 3.1 score of 5...

CVE-2026-73733

CVE-2026-73733 affects the API in HPE Networking Fabric Composer . Authentication bypasses in the API allow an authenticated low-privilege operator user to circumvent existing authentication controls, retaining limited access to the system after that access should have been revoked. The CVSS 3.1 ...

CVE-2026-73732

HPE Networking Fabric Composer contains a vulnerability in its underlying operating system that allows an authenticated, low-privilege operator with local access to obtain sensitive information. Successful exploitation could enable an attacker to retrieve data useful for gaining further unauthori...

CVE-2026-73731

A reflected cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to execute arbitrary script code in a victim's browser. The attack requires user interaction (e.g., clicking a crafted link) and r...

CVE-2026-73730

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer , caused by broken access control . An authenticated low-privilege operator user can change the state of certain system settings, resulting in high integrity impact without affecting confidentiality or availa...

CVE-2026-73729

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low-privilege operator user with local access to upstream AFC dependencies to view sensitive information. Successful exploitation could lead to access of data beyond the user's author...

CVE-2026-73728

CVE-2026-73728 affects the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can trigger denial-of-service vulnerabilities, interrupting the normal operation of the affected service. The vulnerability is network-exploitable with low attack complexity and require...

CVE-2026-73727

HPE Networking Fabric Composer contains an information disclosure vulnerability in its API that allows an authenticated low-privilege operator user to access sensitive data beyond their authorized privilege level. A successful exploit could be leveraged to gain further access to network services ...

CVE-2026-73726

CVE-2026-73726 affects the underlying operating system of HPE Networking Fabric Composer , allowing an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation grants an attacker administrative access , the ability to modify system configurations , an...

CVE-2026-73725

CVE-2026-73725 is a local privilege-escalation vulnerability in HPE Networking Fabric Composer that, when successfully exploited, allows a local attacker with low privileges to achieve arbitrary code execution with root , resulting in complete compromise of the affected host. The CVSS 3.1 base sc...

CVE-2026-73724

Privilege escalation vulnerabilities in the API of HPE Networking Fabric Composer stem from broken access control , allowing an authenticated low-privilege operator user to change the state of certain system settings. The CVSS 3.1 score is 7.1 (HIGH) with high integrity and low availability impac...

CVE-2026-73723

HPE Networking Fabric Composer contains a privilege escalation vulnerability in its web-based management interface . An authenticated user with low-privilege operator access can perform state-changing actions that exceed their authorized permission level. The flaw is network-reachable with low at...

CVE-2026-73722

CVE-2026-73722 affects the web-based management interface of HPE Networking Fabric Composer . Command injection vulnerabilities allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system, leading to full compromise of confidentiali...

CVE-2026-73721

CVE-2026-73721 describes SQL injection vulnerabilities in the API of HPE Networking Fabric Composer . An authenticated remote attacker can exploit these flaws to obtain and modify sensitive data in the underlying database, potentially leading to complete compromise of the host . The CNA-assigned ...

CVE-2026-73720

HPE Networking Fabric Composer contains insecure file operations in its API that could allow an authenticated remote attacker to achieve remote code execution . Successful exploitation permits an attacker to execute arbitrary commands as a privileged user on the underlying operating system, resul...

CVE-2026-73719

CVE-2026-73719 is an arbitrary file write vulnerability in the API of HPE Networking Fabric Composer . An authenticated administrative user can exploit it to escalate privileges and execute arbitrary system commands with root on the underlying operating system. The CVSS 3.1 score is 7.2 (HIGH) wi...

CVE-2026-73718

A vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to access sensitive information by convincing an authenticated user to interact with a specially crafted URL . The disclosed impact is confidentiality loss (no integri...

CVE-2026-73717

CVE-2026-73717 is a command injection vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated remote attacker can execute arbitrary commands on the underlying operating system, potentially leading to complete system compromise . Exploitation requ...