CVE-2026-73712
Awaiting Analysis Awaiting Analysis - Queue

Remote Command Execution in HPE Networking Fabric Composer API

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description
A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-02
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-73712
EUVD
EUVD-2026-69439

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe networking_fabric_composer *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an unauthenticated remote attacker to execute arbitrary commands on the underlying host of HPE Networking Fabric Composer if certain external conditions are met. Successful exploitation could lead to full system compromise by granting the attacker control over the operating system.

Detection Guidance

Detection requires checking for HPE Networking Fabric Composer installations and verifying if the API is exposed to unauthenticated access. Inspect network traffic for unusual API requests or command execution patterns. Use network scanning tools like nmap to identify exposed API endpoints. Check system logs for unexpected command executions or unauthorized access attempts.

Impact Analysis

If exploited, this vulnerability could allow attackers to take complete control of the affected system, potentially leading to data theft, system damage, or unauthorized access to sensitive information. It poses a high risk due to the potential for full system compromise.

Compliance Impact

This vulnerability could lead to complete system compromise by allowing arbitrary command execution on the underlying operating system. Such a breach may result in unauthorized access to sensitive data, which could violate compliance requirements under GDPR, HIPAA, or other regulations depending on the data processed.

Mitigation Strategies

Apply vendor-provided patches or updates for HPE Networking Fabric Composer immediately. Isolate affected systems from untrusted networks. Monitor network traffic for unusual activity. Restrict API access to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73712. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart