Privilege Escalation Vulnerability in HPE Networking Fabric Composer
CVE-2026-73707

8.5HIGH

Key Information:

Vendor

HP (HP)

Vendor
CVE Published:
1 September 2026

What is CVE-2026-73707?

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. This flaw can be exploited by low privilege operator users, enabling them to perform unauthorized state-changing actions. Successful exploitation could lead to changes in the configuration of systems managed by the affected product, which poses a significant security risk to network environments relying on HPE's solutions.

Affected Version(s)

Fabric Composer 7.0.0 <= 7.3.3

References

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Unknown contributor
.