AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Hewlett Packard Enterprise Fabric Composer: privilege escalation

Hewlett Packard Enterprise

CVE-2026-73707 · Published Sep 1, 2026 · updated Sep 2, 2026

High8.5
No fix yet

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform, including changes to the configuration of systems managed by the affected product.

Affected versions

PackageAffectedFixed in
Fabric Composer
Product
>= 7.0.0, <= 7.3.3No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-863

More Hewlett Packard Enterprise advisories

All Hewlett Packard Enterprise