HIGH🇬🇧 English

CVE-2026-73702

CVSS 8.8v3.1pub. 2026-09-01upd. 2026-09-02

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete system compromise.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Arubanetworks Fabric Composer

    APP
    Arubanetworks
    < 7.3.4
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
LPE
CWE
Referencje

Powiązane podatności

CVE-2026-73701CRITICAL9.0ten sam produkt

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networ...

CVE-2026-76657CRITICAL10.0ten sam produkt

Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow...

CVE-2026-19766CRITICAL9.6ten sam produkt

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Comp...

CVE-2026-73700CRITICAL9.0ten sam produkt

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authent...

CVE-2026-76658CRITICAL10.0ten sam produkt

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an un...