CVE-2026-73723

Modified Modified - Updated After Analysis

Privilege Escalation in HPE Networking Fabric Composer

Publication date: 2026-09-01

Last updated on: 2026-09-02

Assigner: Hewlett Packard Enterprise (HPE)

Description

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-02

Generated

2026-09-22

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-20

NVD

CVE-2026-73723

EUVD

EUVD-2026-69450

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	fabric_composer	to 7.3.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This is a privilege escalation vulnerability in HPE Networking Fabric Composer's web-based management interface. An authenticated low privilege operator user can perform unauthorized state-changing actions beyond their assigned authorization level.

Impact Analysis

An attacker with low-level access could escalate privileges to perform unauthorized actions, potentially compromising the integrity of the network management system and its configurations.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized privilege escalation. An attacker with low-level access could gain higher privileges, potentially accessing or modifying sensitive data, which violates confidentiality and integrity requirements in these regulations.

Mitigation Strategies

Update HPE Networking Fabric Composer to the latest patched version immediately. Restrict operator user privileges to the minimum required. Monitor web interface logs for unusual state-changing actions by low privilege users.

Hi! I’m here to help you understand CVE-2026-73723. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70