CVE-2026-73717
Awaiting Analysis Awaiting Analysis - Queue

Command Injection in HPE Networking Fabric Composer

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description
A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-02
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-73717
EUVD
EUVD-2026-69444

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe networking_fabric_composer *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a command injection vulnerability in HPE Networking Fabric Composer's web-based management interface. An unauthenticated remote attacker could exploit it to run arbitrary commands on the host system if certain external conditions are met. Successful exploitation may lead to full system compromise.

Detection Guidance

Detection requires checking for vulnerable versions of HPE Networking Fabric Composer. Inspect installed software versions and compare against HPE advisories. No specific commands are provided in the context.

Impact Analysis

An attacker could gain complete control over the affected system, allowing them to execute any command, steal data, install malware, or disrupt operations. This could lead to data breaches, system outages, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, which may violate compliance requirements under GDPR, HIPAA, and other regulations. Organizations could face legal penalties, fines, or reputational damage due to non-compliance resulting from exploitation of this flaw.

Mitigation Strategies

Apply patches or updates provided by HPE immediately. Disable remote access to the web-based management interface if not required. Implement network segmentation to limit exposure. Monitor network traffic for suspicious activity targeting the interface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73717. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart