← Terug naar overzicht

An unauthenticated remote code execution vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer. The vulnerability can be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation allows an unauthenticated remote attacker to execute arbitrary code as a privileged user. This could lead to complete compromise of the HPE Networking Fabric Composer host. The vulnerability is classified as high severity given its potential for full system takeover without authentication. HPE has published a security bulletin with further details and remediation guidance. No authentication is required to exploit this vulnerability, significantly increasing its risk profile.

Affected products

  • HPE Networking Fabric Composer

Related CVE's

  • CVE-2026-73701

Categories

  • Network Infrastructure
  • Operating Systems
  • Zero-Day Vulnerabilities