CVE-2026-73705 - Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer

Back Back to CVE browser

HIGH

Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer

Published Sep 1, 2026

8.8

HIGH

CVSS 3.1

EPSS 0.62%

Description

An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary commands on the underlying operating system, leading to complete compromise of the affected system.

Affected products

Vendor Hewlett Packard Enterprise (HPE) Product Fabric Composer Default
affected
- Version
  7.0.0
  Status
  affected
  Constraints
  <=7.3.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Hewlett Packard Enterprise (HPE)

Fabric Composer

affected

Version	Status	Constraints
7.0.0	affected	<=7.3.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-552

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-69432
Advisory
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-69432		Advisory
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US		Vendor Advisory