Advisories · Technology

Hewlett Packard Enterprise (HPE) Fabric Composer.

Every CVE that names Hewlett Packard Enterprise (HPE) Fabric Composer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-73735 CVE record

CVSS 5.4 Medium

Authenticated Access Control Vulnerabilities allow Information Disclosure in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Information disclosure
Not analysed yet 1 Sept 2026
CVE-2026-73734 CVE record

CVSS 5.4 Medium

Unauthenticated Open Redirect allows URL Manipulation in HPE Networking Fabric Composer Web Interface
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Open redirect
Not analysed yet 1 Sept 2026
CVE-2026-73733 CVE record

CVSS 5.4 Medium

Authentication Bypasses in API allow Continued Authenticated Access in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Authentication bypass
Not analysed yet 1 Sept 2026
CVE-2026-73732 CVE record

CVSS 5.6 Medium

Local Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Information disclosure
Not analysed yet 1 Sept 2026
CVE-2026-73731 CVE record

CVSS 6.1 Medium

Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Cross-site scripting (XSS)
Not analysed yet 1 Sept 2026
CVE-2026-73730 CVE record

CVSS 6.5 Medium

Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Privilege escalation
Not analysed yet 1 Sept 2026
CVE-2026-73729 CVE record

CVSS 6.5 Medium

Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Privilege escalation
Not analysed yet 1 Sept 2026
CVE-2026-73728 CVE record

CVSS 6.5 Medium

Authenticated Denial of Service Vulnerabilities in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Denial of service
Not analysed yet 1 Sept 2026
CVE-2026-73727 CVE record

CVSS 6.5 Medium

Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Broken access control
Not analysed yet 1 Sept 2026
CVE-2026-73726 CVE record

CVSS 6.8 Medium

Authentication Bypass in HPE Networking Fabric Composer allows Unauthorized Administrative Access
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Authentication bypass
Not analysed yet 1 Sept 2026
CVE-2026-73725 CVE record

CVSS 7.0 High

Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Privilege escalation
Not analysed yet 1 Sept 2026
CVE-2026-73724 CVE record

CVSS 7.1 High

Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Privilege escalation
Not analysed yet 1 Sept 2026
CVE-2026-73723 CVE record

CVSS 7.1 High

Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Privilege escalation
Not analysed yet 1 Sept 2026
CVE-2026-73722 CVE record

CVSS 7.2 High

Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Command injection
Not analysed yet 1 Sept 2026
CVE-2026-73721 CVE record

CVSS 7.2 High

Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- SQL injection
Not analysed yet 1 Sept 2026
CVE-2026-73720 CVE record

CVSS 7.2 High

Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Path traversal
Not analysed yet 1 Sept 2026
CVE-2026-73719 CVE record

CVSS 7.2 High

Authenticated Arbitrary File Write Vulnerability leads to Remote Code Execution in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Path traversal
Not analysed yet 1 Sept 2026
CVE-2026-73718 CVE record

CVSS 7.4 High

Unauthenticated Information Disclosure in Web Interface allows Sensitive Data Exposure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Cross-site request forgery (CSRF)
Not analysed yet 1 Sept 2026
CVE-2026-73717 CVE record

CVSS 7.5 High

Unauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Command injection
Not analysed yet 1 Sept 2026
CVE-2026-73716 CVE record

CVSS 7.5 High

Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Command injection
Not analysed yet 1 Sept 2026
CVE-2026-73715 CVE record

CVSS 7.5 High

Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Denial of service
Not analysed yet 1 Sept 2026
CVE-2026-73714 CVE record

CVSS 7.6 High

Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Privilege escalation
Not analysed yet 1 Sept 2026
CVE-2026-73713 CVE record

CVSS 7.8 High

Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Privilege escalation
Not analysed yet 1 Sept 2026
CVE-2026-73712 CVE record

CVSS 8.1 High

Unauthenticated Remote Code Execution in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Command injection
Not analysed yet 1 Sept 2026
CVE-2026-73711 CVE record

CVSS 8.1 High

Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Privilege escalation
Not analysed yet 1 Sept 2026
CVE-2026-73710 CVE record

CVSS 8.2 High

Unauthenticated Denial of Service Vulnerabilities in API Endpoint of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Authentication bypass
Not analysed yet 1 Sept 2026
CVE-2026-73709 CVE record

CVSS 8.3 High

Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Command injection
Not analysed yet 1 Sept 2026
CVE-2026-73708 CVE record

CVSS 8.3 High

Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Broken access control
Not analysed yet 1 Sept 2026
CVE-2026-73707 CVE record

CVSS 8.5 High

Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Broken access control
Not analysed yet 1 Sept 2026
CVE-2026-73706 CVE record

CVSS 8.6 High

Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changes
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Authentication bypass
Not analysed yet 1 Sept 2026
CVE-2026-73705 CVE record

CVSS 8.8 High

Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Information disclosure
Not analysed yet 1 Sept 2026
CVE-2026-73704 CVE record

CVSS 8.8 High

Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Command injection
Not analysed yet 1 Sept 2026
CVE-2026-73703 CVE record

CVSS 8.8 High

Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Cross-site scripting (XSS)
Not analysed yet 1 Sept 2026
CVE-2026-73745 CVE record

CVSS 3.1 Low

Unauthenticated Limited Information Disclosure allows Data Exposure in the API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Information disclosure
Not analysed yet 1 Sept 2026
CVE-2026-73702 CVE record

CVSS 8.8 High

Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Broken access control
Not analysed yet 1 Sept 2026
CVE-2026-73701 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Code injection
Not analysed yet 1 Sept 2026
CVE-2026-73700 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Cross-site scripting (XSS)
Not analysed yet 1 Sept 2026
CVE-2026-19766 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
- Hewlett Packard Enterprise (HPE) Fabric Composer
- Authentication bypass
Not analysed yet 1 Sept 2026