Known vulnerabilities in Hewlett Packard Enterprise (HPE) Fabric Composer
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-73720 | Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to… | 7.2 High | Sep 1, 2026 |
| CVE-2026-73719 | An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an… | 7.2 High | Sep 1, 2026 |
| CVE-2026-73718 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated… | 7.4 High | Sep 1, 2026 |
| CVE-2026-73717 | A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that… | 7.5 High | Sep 1, 2026 |
| CVE-2026-73716 | A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that… | 7.5 High | Sep 1, 2026 |
| CVE-2026-73715 | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a… | 7.5 High | Sep 1, 2026 |
| CVE-2026-73714 | A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer | 7.6 High | Sep 1, 2026 |
| CVE-2026-73713 | Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer | 7.8 High | Sep 1, 2026 |
| CVE-2026-73712 | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run… | 8.1 High | Sep 1, 2026 |
| CVE-2026-73711 | A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer | 8.1 High | Sep 1, 2026 |
| CVE-2026-73710 | Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to… | 8.2 High | Sep 1, 2026 |
| CVE-2026-73709 | A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated… | 8.3 High | Sep 1, 2026 |
| CVE-2026-73708 | A business logic vulnerability exists in the API of HPE Networking Fabric Composer | 8.3 High | Sep 1, 2026 |
| CVE-2026-73707 | Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer | 8.5 High | Sep 1, 2026 |
| CVE-2026-73706 | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain… | 8.6 High | Sep 1, 2026 |
| CVE-2026-73705 | An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low… | 8.8 High | Sep 1, 2026 |
| CVE-2026-73704 | A command sanitization bypass exists in the API of HPE Networking Fabric Composer | 8.8 High | Sep 1, 2026 |
| CVE-2026-73703 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated… | 8.8 High | Sep 1, 2026 |
| CVE-2026-73745 | A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker… | 3.1 Low | Sep 1, 2026 |
| CVE-2026-73702 | A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer | 8.8 High | Sep 1, 2026 |
| CVE-2026-73701 | An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking… | 9.0 Critical | Sep 1, 2026 |
| CVE-2026-73700 | A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low… | 9.0 Critical | Sep 1, 2026 |
| CVE-2026-19766 | An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer | 9.6 Critical | Sep 1, 2026 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
HPE Aruba Networking Wireless Operating System (AOS) 27
EdgeConnect SD-WAN Orchestrator 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18