CVE-2026-73721

CVE-2026-73721 describes SQL injection vulnerabilities in the API of HPE Networking Fabric Composer . An authenticated remote attacker can exploit these flaws to obtain and modify sensitive data in the underlying database, potentially leading to complete compromise of the host . The CNA-assigned ...

CVE-2026-73720

HPE Networking Fabric Composer contains insecure file operations in its API that could allow an authenticated remote attacker to achieve remote code execution . Successful exploitation permits an attacker to execute arbitrary commands as a privileged user on the underlying operating system, resul...

CVE-2026-73719

CVE-2026-73719 is an arbitrary file write vulnerability in the API of HPE Networking Fabric Composer . An authenticated administrative user can exploit it to escalate privileges and execute arbitrary system commands with root on the underlying operating system. The CVSS 3.1 score is 7.2 (HIGH) wi...

CVE-2026-73718

A vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to access sensitive information by convincing an authenticated user to interact with a specially crafted URL . The disclosed impact is confidentiality loss (no integri...

CVE-2026-73717

CVE-2026-73717 is a command injection vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated remote attacker can execute arbitrary commands on the underlying operating system, potentially leading to complete system compromise . Exploitation requ...

CVE-2026-73716

A remote code execution vulnerability in the underlying operating system of HPE Networking Fabric Composer allows an unauthenticated remote attacker to execute arbitrary commands as a privileged user, leading to complete compromise of the host. Exploitation requires user interaction and specific ...

CVE-2026-73715

CVE-2026-73715 affects the API component of HPE Networking Fabric Composer . An unauthenticated remote attacker can exploit this vulnerability to conduct a denial-of-service attack, disrupting the availability of the affected interface. The CVSS 3.1 score is 7.5 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:U/C:...

CVE-2026-73714

CVE-2026-73714 is an authenticated sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can access data beyond what their existing privilege level authorizes, potentially leading to further unauthorized access. ...

CVE-2026-73713

Local privilege-escalation vulnerabilities in HPE Networking Fabric Composer allow a local attacker with low privileges and no user interaction to achieve arbitrary code execution with root privileges on the underlying operating system. The CVSS 3.1 base score is 7.8 (HIGH) with a local attack ve...

CVE-2026-73712

HPE Networking Fabric Composer is affected by an unauthenticated remote code execution vulnerability in its API . If certain preconditions outside the attacker's control are met, a remote attacker can execute arbitrary commands on the underlying operating system, leading to complete system compro...

CVE-2026-73711

A privilege escalation vulnerability in the API endpoint of HPE Networking Fabric Composer allows an unauthenticated remote attacker to gain administrative privileges , resulting in complete compromise of the host. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N...

CVE-2026-73710

CVE-2026-73710 affects an API endpoint in HPE Networking Fabric Composer . An unauthenticated remote attacker can trigger a denial of service , with successful exploitation also enabling limited unauthorized modifications to the underlying operating system and disrupting system availability until...

CVE-2026-73709

HPE Networking Fabric Composer has a vulnerability in its underlying operating system that allows an unauthenticated adjacent attacker to execute arbitrary commands on the host. According to the CVELIST entry, the vulnerability is specifically tied to the installation process . Exploitation requi...

CVE-2026-73708

A business logic vulnerability in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator user to gain elevated privileges and modify settings beyond their authorized level. The CVSS 3.1 score is 8.3 (HIGH) with a network vector, low attack complexity, and low pri...

CVE-2026-73707

Privilege escalation via broken access control in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator user to perform state-changing actions that exceed their authorization level, including modifying the configuration of systems managed by the product. The CVS...

CVE-2026-73706

CVE-2026-73706 is an Authentication Bypass vulnerability in the API of HPE Networking Fabric Composer . An unauthenticated remote attacker can obtain limited system information and change the state of certain settings on a vulnerable system. Successful exploitation may expose insight into interna...

CVE-2026-73705

CVE-2026-73705 affects the API of HPE Networking Fabric Composer , where an arbitrary file write flaw allows an authenticated low-privilege operator to escalate privileges. Successful exploitation can lead to arbitrary command execution on the underlying operating system and complete compromise o...

CVE-2026-73704

A command sanitization bypass in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator to escalate to administrative access , resulting in complete system compromise. The vulnerability is classified as Authenticated Command Injection per the CVELIST record. The ...

CVE-2026-73703

CVE-2026-73703 is a stored cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated adjacent attacker can inject malicious script that executes in a victim's browser within the context of the interface, requiring user in...

CVE-2026-73745

HPE Networking Fabric Composer has an unauthenticated information disclosure vulnerability in its API endpoint . A remote attacker with no prior access can view limited information handled by the system, potentially revealing details about internal services and workflows . The CNA-assigned CVSS 3...