CVE-2026-73725

HighCVSS 7.0/10Last modified Sep 2, 2026

Description

A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges, leading to a complete compromise of the affected host.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
Hewlett Packard Enterprise (HPE)Fabric Composer>= 7.0.0, <= 7.3.3

References

Timeline

Published
Sep 1, 2026
Last modified
Sep 2, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-737266.8A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unaCVE-2026-737276.5Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive inCVE-2026-737286.5Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operatoCVE-2026-737296.5A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator useCVE-2026-73738.5Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows hostCVE-2026-737306.5A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticatCVE-2026-737316.1A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to coCVE-2026-737325.6A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator useCVE-2026-737335.4Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent CVE-2026-737345.4A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to reCVE-2026-737355.4Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some informaCVE-2026-737365.3A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to vi