CVE-2026-73706

HighCVSS 8.6/10Last modified Sep 2, 2026

Description

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system. Successful exploitation could allow an attacker to gain insight into internal services and workflows and to make unauthorized changes that may disrupt the normal operation of the affected service.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Sep 1, 2026
Last modified
Sep 2, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-737078.5Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticateCVE-2026-737088.3A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated lowCVE-2026-737098.3A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to runCVE-2026-73716.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC221CVE-2026-737108.2Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of sCVE-2026-737118.1A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unCVE-2026-737128.1A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on theCVE-2026-737137.8Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabCVE-2026-737147.6A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow anCVE-2026-737157.5A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service aCVE-2026-737167.5A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthCVE-2026-737177.5A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthe
CVE-2026-73706: High severity, CVSS 8.6 | Vulnix