Remote Code Execution Vulnerability in HPE Networking Fabric Composer
CVE-2026-73716

7.5HIGH

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73716?

A remote code execution vulnerability has been identified in HPE Networking Fabric Composer, allowing unauthenticated attackers to execute arbitrary commands on the underlying operating system. This exploitation requires specific conditions to be met, which are outside of the attacker's control. If successfully exploited, an attacker could gain privileged access, potentially leading to a complete takeover of the affected host.

Affected Version(s)

Fabric Composer 7.0.0 <= 7.3.3

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Unknown contributor
.