CVE-2026-73723

HighCVSS 7.1/10Last modified Sep 2, 2026

Description

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Weakness enumeration

CWE-863CWE-269

Affected software

VendorProductVersions
Hewlett Packard Enterprise (HPE)Fabric Composer>= 7.0.0, <= 7.3.3

References

Timeline

Published
Sep 1, 2026
Last modified
Sep 2, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-737247.1Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticateCVE-2026-737257.0A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerabilCVE-2026-737266.8A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unaCVE-2026-737276.5Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive inCVE-2026-737286.5Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operatoCVE-2026-737296.5A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator useCVE-2026-73738.5Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows hostCVE-2026-737306.5A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticatCVE-2026-737316.1A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to coCVE-2026-737325.6A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator useCVE-2026-737335.4Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent CVE-2026-737345.4A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to re
CVE-2026-73723: High severity, CVSS 7.1 | Vulnix