CVE-2026-23593

Unauthenticated Limited File Read allows Data Exposure in Web Interface

High ยท published January 27, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

โšก An unauthenticated remote attacker can peek into your system files through HPE Aruba Networking Fabric Composer โ€” no login required! ๐Ÿšจ Think of it as a hotel with an open fire escape โ€” anyone can slip in unnoticed and read through the guest logs without ever checking in! ๐Ÿ“œ This vulnerability could allow an attacker to access sensitive system files, exposing critical information like configurations or credentials. The risk here is significant; once inside, they could gain insights that lead to deeper network compromises. It's a serious breach just waiting to happen!

Put simply

Think of it as a hotel with an open fire escape โ€” anyone can slip in unnoticed and read through the guest logs without ever checking in! ๐Ÿ“œ The flaw arises in the web-based management interface, where an attacker can exploit the lack of authentication to access files within the affected directory. Essentially, without proper checks, the system exposes valuable data that should be secured.

What to do

This vulnerability could allow an attacker to access sensitive system files, exposing critical information like configurations or credentials. The risk here is significant; once inside, they could gain insights that lead to deeper network compromises. It's a serious breach just waiting to happen! To safeguard your network, immediately patch to the latest version of the HPE Aruba Networking Fabric Composer. Additionally, review your access controls to ensure that only authenticated users can interact with sensitive interfaces. Don't wait โ€” this is key for maintaining your security posture! You've got this! Follow these steps and you'll be back in control of your system in no time! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
7.5 ยท HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00709 ยท 53.0th percentile
Published
2026-01-27T17:58Z
EPSS history
Timeline
  • 27 JAN 17:58Z
    Unauthenticated Limited File Read allows Data Exposure in Web Interface
    cvelistv5