Remote Command Execution Vulnerability in HPE Networking Fabric Composer
CVE-2026-73712

8.1HIGH

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73712?

A vulnerability exists in the API of HPE Networking Fabric Composer that may permit an unauthenticated remote attacker to execute arbitrary commands on the host system under specific conditions. If successfully exploited, this vulnerability can result in unauthorized access and control over the operating system, potentially leading to a full compromise of the system's integrity. Organizations using affected versions are advised to implement security patches and monitor their systems closely.

Affected Version(s)

Fabric Composer 7.0.0 <= 7.3.3

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Unknown contributor
.