CVE-2026-73709
Awaiting Analysis Awaiting Analysis - Queue

Remote Code Execution in HPE Networking Fabric Composer

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description
A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-02
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-73709
EUVD
EUVD-2026-69436

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe networking_fabric_composer *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an unauthenticated attacker within the same network to execute arbitrary commands on the underlying host of HPE Networking Fabric Composer if specific external conditions are met. The attack requires proximity to the target system but no authentication.

Detection Guidance

Detection of this vulnerability requires checking for unauthorized command execution on systems running HPE Networking Fabric Composer. Monitor for unusual network traffic or processes spawned by the application. Review system logs for unexpected command execution patterns or elevated privileges.

Impact Analysis

If exploited, an attacker could gain full control over the affected system, leading to potential data breaches, unauthorized access, or disruption of services. This could impact confidentiality, integrity, and availability of the system and its data.

Compliance Impact

The vulnerability allows unauthenticated adjacent attackers to execute arbitrary commands on the underlying operating system, which could lead to unauthorized access and data breaches. This could potentially violate compliance requirements under GDPR and HIPAA by exposing sensitive data or failing to ensure system integrity and confidentiality.

Mitigation Strategies

Apply patches or updates provided by HPE to address the vulnerability in HPE Networking Fabric Composer. Ensure network segmentation to limit exposure to adjacent attackers. Monitor for unusual command execution or unauthorized access attempts on the underlying host.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73709. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart