CVE-2023-24073

The provided documents indicate this CVE is reserved with no public technical details available beyond a Telegram sighting. Action: monitor for updates when the candidate is publicized.

CVE-2023-24074

Technical details for CVE-2023-24074 remain unavailable; the entry is currently reserved. A sighting was reported on a Telegram channel, but no concrete product, root cause, or impact information has been published. Monitor for updates.

CVE-2026-84310

pypdf , a pure-Python PDF library, is vulnerable to denial-of-service via crafted PDFs. The vulnerable component is the _get_outline function in pypdf/_doc_common.py, which lacks global entry-count and nesting-depth limits during outline traversal. A malicious PDF with a large number of outline e...

CVE-2023-44970

CVE-2023-44970 remains reserved with no public technical details available. The only observed data consists of sightings on a Telegram channel. Action: monitor for updates.

CVE-2023-43837

This CVE entry is currently reserved with no public technical details available in the provided documents. Action: monitor for updates when the reserving organization publicizes the vulnerability.

CVE-2026-84309

pypdf versions prior to 6.16.0 are vulnerable to an infinite loop in TreeObject.insert_child (pypdf/generic/_data_structures.py). An attacker can craft a PDF with a cyclic tree structure that causes the method to follow /Next links indefinitely when a writing code path inserts a child, resulting ...

CVE-2026-76658

A vulnerability in the SSH daemon of HPE Networking Fabric Composer allows an unauthenticated remote attacker to gain administrative access to affected hosts. Successful exploitation enables arbitrary command execution as a privileged user on the underlying operating system, leading to complete s...

CVE-2026-76657

HPE Networking Fabric Composer is affected by an authentication bypass vulnerability in its API . An unauthenticated, remote attacker can circumvent existing authentication controls to gain administrative privileges , leading to complete compromise of the host. The CNA-assigned CVSS 3.1 score is ...

CVE-2026-73748

HPE Networking Fabric Composer is affected by an authenticated sensitive information disclosure vulnerability in its interface, where sensitive data is exposed in cleartext format . An attacker with administrative privileges can retrieve this information, which could be leveraged to gain further ...

CVE-2026-73747

CVE-2026-73747 is a local privilege-escalation vulnerability in HPE Networking Fabric Composer . An authenticated low-privilege operator user with local access can elevate privileges and make limited modifications on the affected system. The CVSS 3.1 score is 2.5 (LOW) , reflecting a local attack...

CVE-2026-73746

A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer , allowing an authenticated low-privilege operator user to interrupt normal operation of the affected service. The underlying root cause is not detailed in the provided documents. CVSS v3.1 score is 3.1 (LOW) wi...

CVE-2026-73744

A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer . An authenticated low-privilege operator user can exploit it to disrupt the availability of the affected interface. The CVSS 3.1 base score is 3.5 (LOW) , with a network attack vector...

CVE-2026-73743

HPE Networking Fabric Composer has a vulnerability in its web-based management interface that allows an unauthenticated remote attacker to access data in a cleartext format . A successful exploit could expose network infrastructure data to further compromise. The CVSS 3.1 score is 3.7 (LOW) , ref...

CVE-2026-73742

HPE Networking Fabric Composer contains a vulnerability in an API endpoint classified as Improper Client Address Validation . An authenticated low-privilege operator user can spoof the source address attributed to their requests, causing inaccurate attribution information to be recorded on the af...

CVE-2026-73741

HPE Networking Fabric Composer contains a vulnerability in its API that allows an authenticated low-privilege operator user to read certain system files beyond their authorized privilege level. The resulting impact is a limited confidentiality breach , with no integrity or availability effects, r...

CVE-2026-73740

HPE Networking Fabric Composer is affected by a local privilege escalation vulnerability. An authenticated privileged user on the underlying host can elevate their privileges to a higher role, allowing them to change the state of certain system settings . The CVSS 3.1 score is 4.4 (Medium) , refl...

CVE-2026-73739

CVE-2026-73739 is an authenticated sensitive information disclosure in the API of HPE Networking Fabric Composer . Sensitive data that was expected to remain protected is exposed in cleartext format , allowing an attacker with administrative privileges and local access to retrieve it. The CVSS 3....

CVE-2026-73738

A vulnerability in the underlying operating system of HPE Networking Fabric Composer allows an authenticated low-privilege operator with local access to view sensitive information. The retrieved information could be leveraged to escalate privileges on the affected system. The HPE CNA rates this C...

CVE-2026-73737

An unauthenticated path traversal vulnerability affects the API endpoint of HPE Networking Fabric Composer . A successful exploit allows an adjacent, unauthenticated attacker with high complexity and user interaction to manipulate user-generated files, potentially causing unauthorized changes to ...

CVE-2026-73736

CVE-2026-73736 is an unauthenticated information disclosure vulnerability in the web-based management interface of HPE Networking Fabric Composer . A remote attacker with no prior authentication can view and read files within an affected directory, leading to potential data exposure. The CVSS v3....

CVE-2026-73735

CVE-2026-73735 is an access control vulnerability in the API of HPE Networking Fabric Composer that allows an authenticated low-privilege operator user to read or modify data beyond the scope of their assigned permissions. The impact is rated MEDIUM (CVSS 3.1: 5.4) with low confidentiality and in...

CVE-2026-73734

An unauthenticated open redirect vulnerability exists in the web-based management interface of HPE Networking Fabric Composer , allowing a remote attacker to redirect users to an arbitrary URL. The vulnerability requires user interaction but no prior authentication, carrying a CVSS 3.1 score of 5...

CVE-2026-73733

CVE-2026-73733 affects the API in HPE Networking Fabric Composer . Authentication bypasses in the API allow an authenticated low-privilege operator user to circumvent existing authentication controls, retaining limited access to the system after that access should have been revoked. The CVSS 3.1 ...

CVE-2026-73732

HPE Networking Fabric Composer contains a vulnerability in its underlying operating system that allows an authenticated, low-privilege operator with local access to obtain sensitive information. Successful exploitation could enable an attacker to retrieve data useful for gaining further unauthori...

CVE-2026-73731

A reflected cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to execute arbitrary script code in a victim's browser. The attack requires user interaction (e.g., clicking a crafted link) and r...

CVE-2026-73730

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer , caused by broken access control . An authenticated low-privilege operator user can change the state of certain system settings, resulting in high integrity impact without affecting confidentiality or availa...

CVE-2026-73729

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low-privilege operator user with local access to upstream AFC dependencies to view sensitive information. Successful exploitation could lead to access of data beyond the user's author...

CVE-2026-73728

CVE-2026-73728 affects the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can trigger denial-of-service vulnerabilities, interrupting the normal operation of the affected service. The vulnerability is network-exploitable with low attack complexity and require...

CVE-2026-73727

HPE Networking Fabric Composer contains an information disclosure vulnerability in its API that allows an authenticated low-privilege operator user to access sensitive data beyond their authorized privilege level. A successful exploit could be leveraged to gain further access to network services ...

CVE-2026-73726

CVE-2026-73726 affects the underlying operating system of HPE Networking Fabric Composer , allowing an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation grants an attacker administrative access , the ability to modify system configurations , an...

CVE-2026-73725

CVE-2026-73725 is a local privilege-escalation vulnerability in HPE Networking Fabric Composer that, when successfully exploited, allows a local attacker with low privileges to achieve arbitrary code execution with root , resulting in complete compromise of the affected host. The CVSS 3.1 base sc...

CVE-2026-73724

Privilege escalation vulnerabilities in the API of HPE Networking Fabric Composer stem from broken access control , allowing an authenticated low-privilege operator user to change the state of certain system settings. The CVSS 3.1 score is 7.1 (HIGH) with high integrity and low availability impac...

CVE-2026-73723

HPE Networking Fabric Composer contains a privilege escalation vulnerability in its web-based management interface . An authenticated user with low-privilege operator access can perform state-changing actions that exceed their authorized permission level. The flaw is network-reachable with low at...

CVE-2026-73722

CVE-2026-73722 affects the web-based management interface of HPE Networking Fabric Composer . Command injection vulnerabilities allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system, leading to full compromise of confidentiali...

CVE-2026-73721

CVE-2026-73721 describes SQL injection vulnerabilities in the API of HPE Networking Fabric Composer . An authenticated remote attacker can exploit these flaws to obtain and modify sensitive data in the underlying database, potentially leading to complete compromise of the host . The CNA-assigned ...

CVE-2026-73720

HPE Networking Fabric Composer contains insecure file operations in its API that could allow an authenticated remote attacker to achieve remote code execution . Successful exploitation permits an attacker to execute arbitrary commands as a privileged user on the underlying operating system, resul...

CVE-2026-73719

CVE-2026-73719 is an arbitrary file write vulnerability in the API of HPE Networking Fabric Composer . An authenticated administrative user can exploit it to escalate privileges and execute arbitrary system commands with root on the underlying operating system. The CVSS 3.1 score is 7.2 (HIGH) wi...

CVE-2026-73718

A vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to access sensitive information by convincing an authenticated user to interact with a specially crafted URL . The disclosed impact is confidentiality loss (no integri...

CVE-2026-73717

CVE-2026-73717 is a command injection vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated remote attacker can execute arbitrary commands on the underlying operating system, potentially leading to complete system compromise . Exploitation requ...

CVE-2026-73716

A remote code execution vulnerability in the underlying operating system of HPE Networking Fabric Composer allows an unauthenticated remote attacker to execute arbitrary commands as a privileged user, leading to complete compromise of the host. Exploitation requires user interaction and specific ...

CVE-2026-73715

CVE-2026-73715 affects the API component of HPE Networking Fabric Composer . An unauthenticated remote attacker can exploit this vulnerability to conduct a denial-of-service attack, disrupting the availability of the affected interface. The CVSS 3.1 score is 7.5 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:U/C:...

CVE-2026-73714

CVE-2026-73714 is an authenticated sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can access data beyond what their existing privilege level authorizes, potentially leading to further unauthorized access. ...

CVE-2026-73713

Local privilege-escalation vulnerabilities in HPE Networking Fabric Composer allow a local attacker with low privileges and no user interaction to achieve arbitrary code execution with root privileges on the underlying operating system. The CVSS 3.1 base score is 7.8 (HIGH) with a local attack ve...

CVE-2026-73712

HPE Networking Fabric Composer is affected by an unauthenticated remote code execution vulnerability in its API . If certain preconditions outside the attacker's control are met, a remote attacker can execute arbitrary commands on the underlying operating system, leading to complete system compro...

CVE-2026-73711

A privilege escalation vulnerability in the API endpoint of HPE Networking Fabric Composer allows an unauthenticated remote attacker to gain administrative privileges , resulting in complete compromise of the host. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N...

CVE-2026-73710

CVE-2026-73710 affects an API endpoint in HPE Networking Fabric Composer . An unauthenticated remote attacker can trigger a denial of service , with successful exploitation also enabling limited unauthorized modifications to the underlying operating system and disrupting system availability until...

CVE-2026-73709

HPE Networking Fabric Composer has a vulnerability in its underlying operating system that allows an unauthenticated adjacent attacker to execute arbitrary commands on the host. According to the CVELIST entry, the vulnerability is specifically tied to the installation process . Exploitation requi...

CVE-2026-73708

A business logic vulnerability in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator user to gain elevated privileges and modify settings beyond their authorized level. The CVSS 3.1 score is 8.3 (HIGH) with a network vector, low attack complexity, and low pri...

CVE-2026-73707

Privilege escalation via broken access control in the API of HPE Networking Fabric Composer allows an authenticated low-privilege operator user to perform state-changing actions that exceed their authorization level, including modifying the configuration of systems managed by the product. The CVS...

CVE-2026-73706

CVE-2026-73706 is an Authentication Bypass vulnerability in the API of HPE Networking Fabric Composer . An unauthenticated remote attacker can obtain limited system information and change the state of certain settings on a vulnerable system. Successful exploitation may expose insight into interna...