CVE-2026-73720: fallo de gravedad alta en Hewlett Packard Enterprise (HPE) Fabric Composer
Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.2epss 1.1%
Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Hewlett Packard Enterprise (HPE) · Fabric ComposerCVEs relacionadas — Hewlett Packard Enterprise (HPE) Fabric Composer
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-73722HIGHAuthenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management InterfaceEPSS 1.5%CVE-2026-73717HIGHUnauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management InterfaceEPSS 0.8%CVE-2026-76658CRITICALUnauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH DaemonEPSS 0.7%CVE-2026-76657CRITICALAuthentication Bypass in HPE Networking Fabric Composer API allows Administrative AccessEPSS 0.7%CVE-2026-95756MEDIUMAuthenticated Command Injection Vulnerability in the API of HPE Networking Fabric ComposerEPSS 0.7%CVE-2026-73701CRITICALUnauthenticated Remote Code Execution in HPE Networking Fabric ComposerEPSS 0.7%