CVE-2026-73701: critical vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9epss 0.7%
An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the HPE Networking Fabric Composer host.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Hewlett Packard Enterprise (HPE) · Fabric ComposerRelated CVEs — Hewlett Packard Enterprise (HPE) Fabric Composer
In the same product, most dangerous first.
CVE-2026-73722HIGHAuthenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management InterfaceEPSS 1.5%CVE-2026-73720HIGHAuthenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer APIEPSS 1.1%CVE-2026-73717HIGHUnauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management InterfaceEPSS 0.8%CVE-2026-76658CRITICALUnauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH DaemonEPSS 0.7%CVE-2026-76657CRITICALAuthentication Bypass in HPE Networking Fabric Composer API allows Administrative AccessEPSS 0.7%CVE-2026-95756MEDIUMAuthenticated Command Injection Vulnerability in the API of HPE Networking Fabric ComposerEPSS 0.7%