CVE-2026-73723
7.1
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Exploitability: 2.8 / Impact: 4.2
Source: security-alert@hpe.com (Secondary)
Description
A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform.
Affected (1)
Products: Arubanetworks: Fabric Composer
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 7.3.4 |
Related CWEs
CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
References (1)
Source: security-alert@hpe.com
Vendor Advisory
Timeline
No history available yet.