CVE-2026-73701
Awaiting Analysis Awaiting Analysis - Queue

Unauthenticated Remote Code Execution in HPE Networking Fabric Composer

Vulnerability report for CVE-2026-73701, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the HPE Networking Fabric Composer host.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-02
AI Q&A
2026-09-02
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe networking_fabric_composer *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an unauthenticated remote code execution vulnerability in HPE Networking Fabric Composer's underlying operating system. It requires specific preconditions outside the attacker's control to be met for exploitation. If successful, it allows an unauthenticated remote attacker to run arbitrary code with privileged user permissions, potentially fully compromising the host system.

Impact Analysis

This vulnerability could allow attackers to take complete control of the HPE Networking Fabric Composer host system. This may lead to unauthorized access to sensitive data, disruption of services, installation of malware, or lateral movement within the network to compromise other systems.

Compliance Impact

This vulnerability could lead to complete compromise of the HPE Networking Fabric Composer host, potentially exposing sensitive data or systems. Such a compromise may violate compliance requirements under GDPR or HIPAA if it involves unauthorized access to personal or health information.

Mitigation Strategies

Apply vendor-provided patches or updates for HPE Networking Fabric Composer immediately. Isolate affected systems from untrusted networks. Monitor for unusual activity or unauthorized access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73701. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart