VulnSocial

CVE-2026-19766Patch(arubanetworks / fabric_composer)

LOWCVSS 9.6 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch arubanetworks fabric_composer systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the AFC host.

arubanetworks CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fabric_composer

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 1 signal
  • Peaked 1d ago at 1 mentions (2026-09-02); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
arubanetworks
Products
fabric_composer

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-02: 1Mentions · 2026-09-09: 1Patch / Workaround · 2026-09-02: 1Patch / Workaround · 2026-09-09: 1Technical Details · 2026-09-09: 109-0209-09
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • NCIIPC India@NCIIPC
    Patch

    Multiple critical #Vulnerabilities have been discovered in #HPE Aruba Networking Fabric Composer. Upgrade immediately to remain safe. #CVE-2026-76657 #CVE-2026-76658 #CVE-2026-19766 #CVE-2026-73700 #CVE-2026-73701 https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US

    Post summary

    The tweet alerts to multiple critical CVEs affecting HPE Aruba Fabric Composer and urges users to upgrade immediately, referencing an HPE support document for guidance.

    10020708
    8.5K followersView on X
  • iototsecnews@iototsecnews
    Patch

    HPE Fabric Composer の脆弱性 CVE-2026-76658 などが FIX：基盤となるホストの完全侵害の恐れ https://iototsecnews.jp/2026/09/01/critical-hpe-fabric-composer-flaw-lets-unauthenticated-attackers-execute-commands-as-privileged-user/ HPE Networking Fabric Composer の SSH デーモンや API における認証制御の欠陥により、未認証の第三者によってリモートから管理者権限が奪取され、システムが乗っ取られる恐れがあります。基盤ホストの完全な侵害／特権コマンドの任意実行／データ漏洩などの深刻な影響が生じるため、バージョン 7.3.4 以降または 7.4.0 以降へのアップデートや管理ポートの分離といった迅速なアクセス制限の適用が強く求められます。対象となる脆弱性には CVE-2026-76658／CVE-2026-76657／CVE-2026-19766／CVE-2026-73700／CVE-2026-73701 などが含まれます。 #CVE202619766 #CVE202673701 #CVE202676657 #CVE202676658 #FabricComposer #HPE #Vulnerability

    Post summary

    The news post discloses that HPE Fabric Composer’s SSH daemon/API contains authentication flaws enabling remote privilege escalation via multiple CVEs, and it urges users to apply updates or isolate management traffic to mitigate severe risks.

    00000128
    514 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apparubanetworksfabric_composer---

Explore more

Back to dashboardarubanetworks CVEsfabric_composer vulnerabilities