CVE-2026-73722

Modified Modified - Updated After Analysis

Command Injection in HPE Networking Fabric Composer

Publication date: 2026-09-01

Last updated on: 2026-09-02

Assigner: Hewlett Packard Enterprise (HPE)

Description

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-02

Generated

2026-09-22

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-20

NVD

CVE-2026-73722

EUVD

EUVD-2026-69449

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	fabric_composer	to 7.3.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is a command injection flaw in the web-based management interface of HPE Networking Fabric Composer. It allows an authenticated remote attacker to inject and execute arbitrary commands on the affected system with privileged user privileges.

Detection Guidance

Detection requires checking for command injection flaws in HPE Networking Fabric Composer's web interface. Inspect HTTP requests for suspicious parameters that may allow command execution. Use network scanning tools to identify vulnerable versions of the software. No specific commands are provided in the given context.

Impact Analysis

An attacker could exploit this to run malicious commands on your system, potentially leading to unauthorized access, data theft, system damage, or further network compromise. The impact depends on the attacker's goals and system configuration.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations may face legal penalties, reputational damage, and mandatory breach notifications.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for Networking Fabric Composer. Restrict network access to the web-based management interface to trusted users only. Monitor system logs for suspicious activity related to command execution.

Hi! I’m here to help you understand CVE-2026-73722. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70