CVE-2026-73724CWE-269CWE-863broken-access-controlprivilege-escalation
CVE-2026-73724
High · published September 2, 2026
What it is
Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.
The record
Technical detail
- CVSS v3.1
- 7.1 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00338 · 26.0th percentile
- Weaknesses
- CWE-269 · Improper Privilege Management; CWE-863 · Incorrect Authorization
- Published
- 2026-09-02T00:17Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| arubanetworks/fabric_composer | < 7.3.4 | 7.3.4 |
References (1)
EPSS history
Timeline