CVE-2026-19766

Awaiting Analysis Awaiting Analysis - Queue

Authentication Bypass in HPE Networking Fabric Composer Leads to RCE

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the AFC host.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-01

Generated

2026-09-02

AI Q&A

2026-09-02

EPSS Evaluated

N/A

NVD

CVE-2026-19766

EUVD

EUVD-2026-69577

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_fabric_composer	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is an authentication bypass vulnerability in HPE Networking Fabric Composer's underlying operating system. An unauthenticated attacker within the same network segment could exploit it to gain privileged access and execute arbitrary code, potentially taking full control of the AFC host system.

Impact Analysis

If you use HPE Networking Fabric Composer, an attacker could gain complete control of your system, steal data, install malware, or disrupt operations. This could lead to data breaches, service outages, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR's data protection requirements and HIPAA's security rules. Organizations may face fines, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for Networking Fabric Composer to address the authentication bypass vulnerability. Isolate affected systems from untrusted networks and restrict access to the underlying operating system. Monitor network traffic for unusual activity and review system logs for signs of exploitation attempts.

Hi! I’m here to help you understand CVE-2026-19766. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70