CVE-2026-73713

HighCVSS 7.8/10Last modified Sep 2, 2026

Description

Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could allow a local attacker to achieve arbitrary code execution with root privileges on the underlying operating system of the affected system.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Sep 1, 2026
Last modified
Sep 2, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-737147.6A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow anCVE-2026-737157.5A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service aCVE-2026-737167.5A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthCVE-2026-737177.5A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unautheCVE-2026-737187.4A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to acCVE-2026-737197.2An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative usCVE-2026-73729.0A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP requCVE-2026-737207.2Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code exCVE-2026-737217.2Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks aCVE-2026-737227.2Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remotCVE-2026-737237.1A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitationCVE-2026-737247.1Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticate
CVE-2026-73713: High severity, CVSS 7.8 | Vulnix