CVE-2026-73701

Analyzed Analyzed - Analysis Complete

Unauthenticated Remote Code Execution in HPE Networking Fabric Composer

Publication date: 2026-09-01

Last updated on: 2026-09-02

Assigner: Hewlett Packard Enterprise (HPE)

Description

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the HPE Networking Fabric Composer host.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-02

Generated

2026-09-22

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-20

NVD

CVE-2026-73701

EUVD

EUVD-2026-69579

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	fabric_composer	to 7.3.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

This is an unauthenticated remote code execution vulnerability in HPE Networking Fabric Composer's underlying operating system. It requires specific preconditions outside the attacker's control to be met for exploitation. If successful, it allows an unauthenticated remote attacker to run arbitrary code with privileged user permissions, potentially fully compromising the host system.

Detection Guidance

Detection of this vulnerability requires checking for unauthorized remote code execution attempts on HPE Networking Fabric Composer hosts. Monitor network traffic for unexpected connections to the system and inspect logs for suspicious commands or processes. No specific commands are provided in the available context.

Impact Analysis

This vulnerability could allow attackers to take complete control of the HPE Networking Fabric Composer host system. This may lead to unauthorized access to sensitive data, disruption of services, installation of malware, or lateral movement within the network to compromise other systems.

Compliance Impact

This vulnerability could lead to complete compromise of the HPE Networking Fabric Composer host, potentially exposing sensitive data or systems. Such a compromise may violate compliance requirements under GDPR or HIPAA if it involves unauthorized access to personal or health information.

Mitigation Strategies

Apply vendor-provided patches or updates for HPE Networking Fabric Composer immediately. Isolate affected systems from untrusted networks. Monitor for unusual activity or unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-73701. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70