CVE-2026-73755

CVE-2026-73755 is a privilege escalation vulnerability in the API endpoint of AOS-CX (HPE). An authenticated low-privilege operator user , after a required user interaction, can access sensitive session information from the system. The CVSS 3.1 score is 5.7 (MEDIUM) with the vector AV:N/AC:L/PR:L...

CVE-2026-73747

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system...

CVE-2026-73741

A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation could allow an attacker to access limited data beyond what is authorized by the user's existing privilege level...

CVE-2026-73735

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some information beyond their privilege level. Successful exploitation could allow an attacker to obtain limited information and/or make limited changes beyond what is...

CVE-2026-73704

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system...

CVE-2026-73700

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to...

CVE-2026-73744 Authenticated Denial of Service Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to disrupt the availability of the affected...

CVE-2026-73744

A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer . An authenticated low-privilege operator user can exploit it to disrupt the availability of the affected interface. The CVSS 3.1 base score is 3.5 (LOW) , with a network attack vector...

CVE-2026-73742 Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint

A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...

CVE-2026-73741 Authenticated Limited File Read allows Data Exposure in HPE Networking Fabric Composer API

A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation could allow an attacker to access limited data beyond what is authorized by the user's existing privilege level...

EUVD-2026-69460

Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent existing authentication controls. Successful exploitation could allow an attacker to retain limited access to the affected system after that access should ha...

CVE-2026-73733

CVE-2026-73733 affects the API in HPE Networking Fabric Composer . Authentication bypasses in the API allow an authenticated low-privilege operator user to circumvent existing authentication controls, retaining limited access to the system after that access should have been revoked. The CVSS 3.1 ...

EUVD-2026-69455

Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

CVE-2026-73728

CVE-2026-73728 affects the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can trigger denial-of-service vulnerabilities, interrupting the normal operation of the affected service. The vulnerability is network-exploitable with low attack complexity and require...

EUVD-2026-69450

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorizati...

EUVD-2026-69441

A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to access data beyond what is authorized by the user's existing privilege level, potentially leading to further...

EUVD-2026-69434

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform, includin...

CVE-2026-73700 Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit could allow an attacker to...

PT-2026-84476

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A privilege escalation issue exists in the API endpoint of AOS-CX. This allows an authenticated user with low privilege operator permissions to modify the state of specific system settings...

PT-2026-84392

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Kibana contains a path traversal issue in its tag management interface. A low-privileged user with tag creation privileges can craft a tag that causes a subsequent administrative action in the...