CVE-2026-73708

Published: Sep 1, 2026Modified: Sep 2, 2026

8.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Exploitability: 2.8 / Impact: 5.5

Source: security-alert@hpe.com (Secondary)

Description

A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to obtain elevated privileges and modify settings beyond what is authorized by the user's existing privilege level on a vulnerable system.

Affected (1)

Products: Arubanetworks: Fabric Composer

1 product

Fabric Composer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Arubanetworks Fabric Composer	Before 7.3.4

Related CWEs

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US

Source: security-alert@hpe.com

Vendor Advisory

Timeline

No history available yet.