CVE-2026-73701Patch(arubanetworks / fabric_composer)

LOWCVSS 9.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch arubanetworks fabric_composer systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the HPE Networking Fabric Composer host.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fabric_composer

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 1 signal
  • Peaked 1d ago at 1 mentions (2026-09-02); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Products
fabric_composer

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-02: 1Mentions · 2026-09-09: 1Patch / Workaround · 2026-09-02: 1Patch / Workaround · 2026-09-09: 1Technical Details · 2026-09-09: 109-0209-09
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • NCIIPC India@NCIIPC
    Patch

    Multiple critical #Vulnerabilities have been discovered in #HPE Aruba Networking Fabric Composer. Upgrade immediately to remain safe. #CVE-2026-76657 #CVE-2026-76658 #CVE-2026-19766 #CVE-2026-73700 #CVE-2026-73701 https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US

    Post summary

    The tweet alerts users to several critical vulnerabilities in HPE Aruba Networking Fabric Composer and urges an immediate upgrade, linking to HPE support for more information.

    10020708
    8.5K followersView on X
  • iototsecnews@iototsecnews
    Patch

    HPE Fabric Composer の脆弱性 CVE-2026-76658 などが FIX:基盤となるホストの完全侵害の恐れ https://iototsecnews.jp/2026/09/01/critical-hpe-fabric-composer-flaw-lets-unauthenticated-attackers-execute-commands-as-privileged-user/ HPE Networking Fabric Composer の SSH デーモンや API における認証制御の欠陥により、未認証の第三者によってリモートから管理者権限が奪取され、システムが乗っ取られる恐れがあります。基盤ホストの完全な侵害/特権コマンドの任意実行/データ漏洩などの深刻な影響が生じるため、バージョン 7.3.4 以降または 7.4.0 以降へのアップデートや管理ポートの分離といった迅速なアクセス制限の適用が強く求められます。対象となる脆弱性には CVE-2026-76658/CVE-2026-76657/CVE-2026-19766/CVE-2026-73700/CVE-2026-73701 などが含まれます。 #CVE202619766 #CVE202673701 #CVE202676657 #CVE202676658 #FabricComposer #HPE #Vulnerability

    Post summary

    The post alerts on authentication flaws in HPE Fabric Composer that enable unauthenticated attackers to gain privileged access and urges applying recent updates or port isolation to mitigate the risk.

    00000128
    514 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apparubanetworksfabric_composer---

Explore more