FC
Product
Fabric Composer
57
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 24Medium 22Low 6
Watch
Add Fabric Composer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76658 | 10.0 | Sep 1 | Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon Affected: through 7.3.3 |
| CVE-2026-76657 | 10.0 | Sep 1 | Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access Affected: before 7.3.4 |
| CVE-2026-19766 | 9.6 | Sep 1 | Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer Affected: 7.0.0 through 7.3.3 |
| CVE-2026-73701 | 9.0 | Sep 1 | Unauthenticated Remote Code Execution in HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73700 | 9.0 | Sep 1 | Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface Affected: before 7.3.4 |
| CVE-2026-73705 | 8.8 | Sep 1 | Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73704 | 8.8 | Sep 1 | Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API Affected: before 7.3.4 |
| CVE-2026-73703 | 8.8 | Sep 1 | Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface Affected: before 7.3.4 |
| CVE-2026-73702 | 8.8 | Sep 1 | Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73706 | 8.6 | Sep 1 | Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changes Affected: before 7.3.4 |
| CVE-2026-73707 | 8.5 | Sep 1 | Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API Affected: before 7.3.4 |
| CVE-2026-73709 | 8.3 | Sep 1 | Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process Affected: before 7.3.4 |
| CVE-2026-73708 | 8.3 | Sep 1 | Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73710 | 8.2 | Sep 1 | Unauthenticated Denial of Service Vulnerabilities in API Endpoint of HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73712 | 8.1 | Sep 1 | Unauthenticated Remote Code Execution in HPE Networking Fabric Composer API Affected: before 7.3.4 |
| CVE-2026-73711 | 8.1 | Sep 1 | Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer API Affected: before 7.3.4 |
| CVE-2026-73713 | 7.8 | Sep 1 | Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73714 | 7.6 | Sep 1 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API Affected: before 7.3.4 |
| CVE-2026-73717 | 7.5 | Sep 1 | Unauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface Affected: before 7.3.4 |
| CVE-2026-73716 | 7.5 | Sep 1 | Unauthenticated Remote Code Execution in HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73715 | 7.5 | Sep 1 | Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73718 | 7.4 | Sep 1 | Unauthenticated Information Disclosure in Web Interface allows Sensitive Data Exposure in HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73722 | 7.2 | Sep 1 | Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface Affected: before 7.3.4 |
| CVE-2026-73721 | 7.2 | Sep 1 | Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73720 | 7.2 | Sep 1 | Authenticated Insecure File Handling allows Remote Code Execution in HPE Networking Fabric Composer API Affected: before 7.3.4 |
| CVE-2026-73719 | 7.2 | Sep 1 | Authenticated Arbitrary File Write Vulnerability leads to Remote Code Execution in HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73724 | 7.1 | Sep 1 | Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73723 | 7.1 | Sep 1 | Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interface Affected: before 7.3.4 |
| CVE-2026-73725 | 7.0 | Sep 1 | Local Privilege Escalation leads to Arbitrary Code Execution in HPE Networking Fabric Composer Affected: before 7.3.4 |
| CVE-2026-73726 | 6.8 | Sep 1 | Authentication Bypass in HPE Networking Fabric Composer allows Unauthorized Administrative Access Affected: before 7.3.4 |
| CVE-2026-73730 | 6.5 | Sep 1 | Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API Affected: through 7.3.3 |
| CVE-2026-73729 | 6.5 | Sep 1 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2026-73728 | 6.5 | Sep 1 | Authenticated Denial of Service Vulnerabilities in HPE Networking Fabric Composer API Affected: through 7.3.3 |
| CVE-2026-73727 | 6.5 | Sep 1 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API Affected: before 7.3.4 |
| CVE-2025-23054 | 6.5 | Jan 28 | A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticated low privilege operator user to perform operations not… Affected: 7.0.0 before 7.1.1 |
| CVE-2025-23053 | 6.5 | Jan 28 | A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Composer Affected: 7.0.0 before 7.1.1 |
| CVE-2026-73731 | 6.1 | Sep 1 | Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface Affected: through 7.3.3 |
| CVE-2026-73732 | 5.6 | Sep 1 | Local Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2026-73735 | 5.4 | Sep 1 | Authenticated Access Control Vulnerabilities allow Information Disclosure in HPE Networking Fabric Composer API Affected: through 7.3.3 |
| CVE-2026-73734 | 5.4 | Sep 1 | Unauthenticated Open Redirect allows URL Manipulation in HPE Networking Fabric Composer Web Interface Affected: through 7.3.3 |
| CVE-2026-73733 | 5.4 | Sep 1 | Authentication Bypasses in API allow Continued Authenticated Access in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2025-23057 | 5.4 | Jan 28 | A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 7.0.0 before 7.1.1 |
| CVE-2025-23056 | 5.4 | Jan 28 | A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 7.0.0 before 7.1.1 |
| CVE-2025-23055 | 5.4 | Jan 28 | A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS)… Affected: 7.0.0 before 7.1.1 |
| CVE-2026-73736 | 5.3 | Sep 1 | Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2026-73737 | 4.8 | Sep 1 | Unauthenticated Path Traversal in HPE Networking Fabric Composer API Endpoint Allows Unauthorized File Modification Affected: through 7.3.3 |
| CVE-2026-73738 | 4.7 | Sep 1 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2026-73740 | 4.4 | Sep 1 | Local Privilege Escalation in HPE Networking Fabric Composer Affected: through 7.3.3 |
| CVE-2026-73739 | 4.4 | Sep 1 | Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API Affected: through 7.3.3 |
| CVE-2026-73742 | 4.3 | Sep 1 | Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint Affected: through 7.3.3 |