4.8
Moyenne
CVE-2026-73737 An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer
Description
An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations, if certain preconditions outside of the attacker's control are met.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fabric Composer 7.0 | 7.0.0 → 7.3.3 | Pas de correctif indiqué |
Autres CVE de Fabric Composer
Les 98 CVE de Fabric Composer →
CVE-2026-95776
An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…
3.1
Faible
CVE-2026-95777
A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer
3.1
Faible
CVE-2026-95775
A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer
3.3
Faible
CVE-2026-95774
A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer
3.7
Faible