Skip to content

Hewlett Packard Enterprise Fabric Composer: privilege escalation

High7.1CVE-2026-73724 · Published Sep 1, 2026 · updated Sep 2, 2026

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.

Affected versions

PackageAffectedFixed in
Fabric Composer
Product
>= 7.0.0, <= 7.3.3No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-863, CWE-269

More Hewlett Packard Enterprise advisories

All Hewlett Packard Enterprise
Advisory
Hewlett Packard Enterprise AOS-CX: remote code execution
High8.8Sep 1
Hewlett Packard Enterprise AOS-CX: denial of service
Medium4.9Sep 1
Hewlett Packard Enterprise AOS-CX: denial of service
High7.5Sep 1
Hewlett Packard Enterprise AOS-CX: buffer overflow
High7.6Sep 1
Hewlett Packard Enterprise AOS-CX: information disclosure
High7.7Sep 1
Hewlett Packard Enterprise AOS-CX: code execution
High7.9Sep 1

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.