CVE-2026-73704 — Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API
A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate t…
Published: 2026-09-01 · CVSS: 8.8 · CVSS 3.1
A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7