VulnSocial

CVE-2026-73700Patch(arubanetworks / fabric_composer)

LOWCVSS 9.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch arubanetworks fabric_composer systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

arubanetworks CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fabric_composer

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-09-02); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
arubanetworks
Products
fabric_composer

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-09-02: 1Mentions · 2026-09-04: 1Mentions · 2026-09-09: 1Patch / Workaround · 2026-09-02: 1Patch / Workaround · 2026-09-09: 1Technical Details · 2026-09-04: 1Technical Details · 2026-09-09: 109-0209-0409-09
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-021
Patch1
2026-09-041
Disclosure1
2026-09-091
Patch1
Full discourse3 posts
  • NCIIPC India@NCIIPC
    Patch

    Multiple critical #Vulnerabilities have been discovered in #HPE Aruba Networking Fabric Composer. Upgrade immediately to remain safe. #CVE-2026-76657 #CVE-2026-76658 #CVE-2026-19766 #CVE-2026-73700 #CVE-2026-73701 https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US

    Post summary

    The post announces several critical CVEs affecting HPE Aruba Networking Fabric Composer and urges users to apply the vendor’s patch via the provided HPE support link.

    10020708
    8.5K followersView on X
  • iototsecnews@iototsecnews
    Patch

    HPE Fabric Composer の脆弱性 CVE-2026-76658 などが FIX：基盤となるホストの完全侵害の恐れ https://iototsecnews.jp/2026/09/01/critical-hpe-fabric-composer-flaw-lets-unauthenticated-attackers-execute-commands-as-privileged-user/ HPE Networking Fabric Composer の SSH デーモンや API における認証制御の欠陥により、未認証の第三者によってリモートから管理者権限が奪取され、システムが乗っ取られる恐れがあります。基盤ホストの完全な侵害／特権コマンドの任意実行／データ漏洩などの深刻な影響が生じるため、バージョン 7.3.4 以降または 7.4.0 以降へのアップデートや管理ポートの分離といった迅速なアクセス制限の適用が強く求められます。対象となる脆弱性には CVE-2026-76658／CVE-2026-76657／CVE-2026-19766／CVE-2026-73700／CVE-2026-73701 などが含まれます。 #CVE202619766 #CVE202673701 #CVE202676657 #CVE202676658 #FabricComposer #HPE #Vulnerability

    Post summary

    The article highlights several CVEs affecting HPE Fabric Composer that enable unauthenticated remote privilege escalation, and it urges immediate patching to versions 7.3.4/7.4.0 or applying management port isolation to mitigate the risk.

    00000128
    514 followersView on X
  • Cybersecurity News DE@cybsecuritynews
    Disclosure

    #schwachstellen CVE-2026-73700: Kritische XSS-Lücke in HPE Networking Fabric Composer gefährdet Admin-Sitzungen #cve202673700 #hpe #hpenetworkingfabriccomposer #xss https://cybersecurity-news.de/cve-2026-73700-hpe-networking-fabric-composer-stored-xss

    Post summary

    The post announces a critical stored XSS vulnerability (CVE-2026-73700) that compromises admin sessions in HPE Networking Fabric Composer, but offers no PoC, exploit, or patch details.

    0000029
    10 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apparubanetworksfabric_composer---

Explore more

Back to dashboardarubanetworks CVEsfabric_composer vulnerabilities