-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

HPE Networking Product Security Advisory
=============================================
Advisory ID: HPESBNW05133
CVE: Please refer to the References section at the end of this 
     advisory for the complete list of CVEs.
Publication Date: 2026-Sep-01
Status: FINAL
Last Updated: 2026-Sep-01
Severity: Critical
Revision: 1


Title
=====
Multiple Vulnerabilities in HPE Networking Fabric Composer


Summary
=======
HPE Networking has released updates for HPE Networking Fabric 
Composer that address multiple vulnerabilities described in 
this advisory.


Affected Products
=================
These vulnerabilities affect the following HPE Networking 
Fabric Composer versions unless specifically noted otherwise in 
the Details section below:

    - HPE Networking Fabric Composer 7.3.3 and below

NOTE: Product software versions that have reached End of
Maintenance (EoM) are presumed to be affected by the
vulnerabilities unless explicitly stated otherwise, and are
not covered by this security advisory. For deployments
running software versions that are past End of Support
(EoS), HPE Networking has not assessed exposure to the
vulnerabilities referenced in this advisory. As a result,
such installations should be considered potentially impacted
by the listed CVEs. Customers are strongly encouraged to
upgrade to a supported software release to ensure proper
evaluation and remediation.


Unaffected Products
===================
Any other HPE Networking products not specifically listed
above are not affected by these vulnerabilities.


Workaround
==========
To minimize the likelihood of an attacker exploiting these
vulnerabilities, HPE Networking recommends that the
CLI and web-based management interfaces be restricted to a
dedicated layer 2 segment/VLAN and/or controlled by firewall
policies at layer 3 and above along with accounting controls
for tracking and logging user activities and resource usage.


Exploitation and Public Discussion
==================================
These vulnerabilities were all discovered by internal
security research at HPE Networking. HPE
Networking is not aware of any public discussion or exploit
code that targets the listed vulnerabilities as of the
release date of this advisory. Customers are strongly urged
to patch their instances due to the complexity, breadth, and
impact of these vulnerabilities.

Please note that due to the size of the Details and
References blocks, these sections have been moved to the end
of the document to improve readability.


Resolution
==========
To resolve all the vulnerabilities in the affected software 
branches that are addressed through this advisory, HPE Networking
strongly recommends upgrading the HPE Networking Fabric 
Composer software to one of the following versions (as applicable):
 
    - HPE Networking Fabric Composer 7.4.x: 7.4.0 and above
    - HPE Networking Fabric Composer 7.3.x: 7.3.4 and above
 
Software versions with resolution/fixes for the vulnerabilities 
in this advisory can be downloaded from the HPE Networking 
Support Portal at https://networkingsupport.hpe.com/home/.   
 
Product software versions that have reached End of
Maintenance (EoM) are presumed to be affected by the
vulnerabilities unless explicitly stated otherwise, and are
not covered by this security advisory. HPE Networking
does not evaluate or patch software branches that have
reached their End of Support (EoS) milestone.


Revision History
================
Revision 1 / 2026-Sep-01 / Initial Publication


HPE Networking SIRT Security Procedures
=======================================
Complete information on reporting security vulnerabilities
in HPE Networking products and obtaining assistance
with security incidents is available at:
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00100637en_us
 
For reporting *NEW* HPE Networking security issues,
email can be sent to networking-sirt(at)hpe.com. For sensitive
information we encourage the use of PGP encryption. Our
public keys can be found at:
https://www.hpe.com/info/psrt-pgp-key

(c) Copyright 2026 by Hewlett Packard Enterprise Development
LP. This advisory may be redistributed freely after the
release date given at the top of the text, provided that the
redistributed copies are complete and unmodified, including
all data and version information.


Details
=======

Authentication Bypass in HPE Networking Fabric
Composer API allows Administrative Access
(CVE-2026-76657)
- ----------------------------------------------------------------
  Vulnerabilities have been identified in the API of HPE
  Aruba Networking Fabric Composer that could potentially
  allow an unauthenticated remote attacker to circumvent
  existing authentication controls. Successful exploitation
  could allow an attacker to gain administrative privileges
  leading to complete compromise of the HPE Networking
  Fabric Composer host.

  Internal References: VULN-862, VULN-906, VULN-917, VULN-934, 
                       VULN-946. 
  Severity: Critical
  CVSS v3.1 Base Score: 10.0
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Remote Code Execution in HPE Networking
Fabric Composer SSH Daemon
(CVE-2026-76658)
- ----------------------------------------------------------------
  A vulnerability has been identified in the SSH daemon of
  HPE Networking Fabric Composer that could allow an
  unauthenticated remote attacker to gain administrative access
  to vulnerable AFC hosts. Successful exploitation could allow
  an attacker to execute arbitrary commands as a privileged
  user on the underlying operating system leading to complete
  system compromise.

  Internal References: VULN-918
  Severity: Critical
  CVSS v3.1 Base Score: 10.0
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authentication Bypass leads to Administrative control
of adjacent network hosts in HPE Networking Fabric
Composer
(CVE-2026-19766)
- ----------------------------------------------------------------
  An authentication bypass vulnerability
  exists in the underlying operating system of HPE Networking
  Fabric Composer. Successful exploitation could allow an 
  unauthenticated adjacent attacker to execute arbitrary code 
  as a privileged user on the underlying operating system, 
  leading to complete compromise of the AFC host.

  Internal References: VULN-876
  Severity: Critical
  CVSS v3.1 Base Score: 9.6
  CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Stored Cross-Site Scripting Vulnerability
(XSS) in HPE Networking Fabric Composer Web-Based
Management Interface
(CVE-2026-73700)
- ----------------------------------------------------------------
  A vulnerability in the web-based management interface of
  HPE Networking Fabric Composer could allow an
  authenticated low-privilege operator user to conduct a
  stored cross-site scripting (XSS) attack against an
  administrative user of the interface. A successful exploit
  could allow an attacker to execute arbitrary script code in
  a victim's browser in the context of the affected
  interface.

  Internal References: VULN-892, VULN-894, VULN-927, VULN-931, 
                       VULN-855
  Severity: Critical
  CVSS v3.1 Base Score: 9.0
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.



Unauthenticated Remote Code Execution in HPE Aruba
Networking Fabric Composer
(CVE-2026-73701)
- ----------------------------------------------------------------
  An unauthenticated remote code execution vulnerability
  exists in the underlying operating system of HPE Aruba
  Networking Fabric Composer and could be exploited if
  certain preconditions outside of the attacker's control are
  met. Successful exploitation of this vulnerability could
  allow an unauthenticated remote attacker to execute
  arbitrary code as a privileged user on the underlying
  operating system, leading to complete compromise of the HPE
  Aruba Networking Fabric Composer host.

  Internal References: VULN-913, VULN-914, VULN-923, VULN-924, 
                       VULN-859, VULN-870, VULN-919

  Severity: Critical
  CVSS v3.1 Base Score: 9.0
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Privilege Escalation Vulnerability in the API
of HPE Networking Fabric Composer
(CVE-2026-73702)
- ----------------------------------------------------------------
  A privilege escalation vulnerability exists in the API of
  HPE Networking Fabric Composer. Successful
  exploitation could allow an authenticated low privilege
  operator user to escalate their permissions to those of an
  administrative user, leading to complete system compromise.

  Internal References: VULN-891
  Severity: High
  CVSS v3.1 Base Score: 8.8
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Stored Cross-Site Scripting (XSS)
Vulnerability in HPE Networking Fabric Composer
Web-Based Management Interface
(CVE-2026-73703)
- ----------------------------------------------------------------
  A vulnerability in the web-based management interface of
  HPE Networking Fabric Composer could allow an
  unauthenticated adjacent attacker to conduct a stored
  cross-site scripting (XSS) attack against a user of the
  interface. A successful exploit could allow an attacker to
  execute arbitrary script code in a victim's browser in the
  context of the affected interface.

  Internal References: VULN-895
  Severity: High
  CVSS v3.1 Base Score: 8.8
  CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Command Injection Leading to
Administrative Access in HPE Networking Fabric
Composer API
(CVE-2026-73704)
- ----------------------------------------------------------------
  A command sanitization bypass exists in the API of
  HPE Networking Fabric Composer. Successful
  exploitation could allow an authenticated low privilege
  operator user to escalate their permissions to those of an
  administrative user, leading to complete compromise of the
  affected system.

  Internal References: VULN-904, VULN-930, VULN-945
  Severity: High
  CVSS v3.1 Base Score: 8.8
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at
                    HPE Networking.


Authenticated Arbitrary File Write leads to Remote Code
Execution in HPE Networking Fabric Composer
(CVE-2026-73705)
- ----------------------------------------------------------------
  An arbitrary file write vulnerability in the API of HPE
  Aruba Networking Fabric Composer could allow an
  authenticated low-privilege operator user to escalate
  privileges. Successful exploitation of this vulnerability
  may enable the attacker to execute arbitrary commands on
  the underlying operating system, leading to complete
  compromise of the affected system.

  Internal References: VULN-912
  Severity: High
  CVSS v3.1 Base Score: 8.8
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authentication Bypass in the API of HPE Networking Fabric
Composer allows Data Exposure and Unauthorized Changes
(CVE-2026-73706)
- ----------------------------------------------------------------
  A vulnerability in the API of HPE Networking Fabric
  Composer could allow an unauthenticated remote attacker to
  obtain limited system information and to change the state
  of certain settings of a vulnerable system. Successful
  exploitation could allow an attacker to gain insight into
  internal services and workflows and to make unauthorized
  changes that may disrupt the normal operation of the
  affected service.

  Internal References: VULN-916
  Severity: High
  CVSS v3.1 Base Score: 8.6
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Privilege Escalation via Broken Access
Control in HPE Networking Fabric Composer API
(CVE-2026-73707)
- ----------------------------------------------------------------
  Privilege escalation vulnerabilities exist in the API of
  HPE Networking Fabric Composer. Successful
  exploitation could allow an authenticated low privilege
  operator user to complete state-changing actions that
  should not be allowed by their current level of
  authorization on the platform, including changes to the
  configuration of systems managed by the affected product.

  Internal References: VULN-899, VULN-909, VULN-911, VULN-928
  Severity: High
  CVSS v3.1 Base Score: 8.5
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at
                    HPE Networking.


Fault in Business Logic allows Authenticated Sensitive
Information Disclosure in HPE Networking Fabric Composer
(CVE-2026-73708)
- ----------------------------------------------------------------
  A business logic vulnerability exists in the API of
  HPE Networking Fabric Composer. Successful
  exploitation could allow an authenticated low privilege
  operator user to obtain elevated privileges and modify
  settings beyond what is authorized by the user's existing
  privilege level on a vulnerable system.

  Internal References: VULN-879
  Severity: High
  CVSS v3.1 Base Score: 8.3
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Remote Code Execution during HPE Networking
Fabric Composer Installation Process
(CVE-2026-73709)
- ----------------------------------------------------------------
  A vulnerability in the underlying operating system of HPE
  Aruba Networking Fabric Composer could allow an
  unauthenticated adjacent attacker to run arbitrary commands
  on the underlying host if certain preconditions outside of
  the attacker's control are met. Successful exploitation
  could allow an attacker to execute arbitrary commands on
  the underlying operating system.

  Internal References: VULN-920
  Severity: High
  CVSS v3.1 Base Score: 8.3
  CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Denial-of-Service (DoS) Vulnerabilities in
API Endpoint of HPE Networking Fabric Composer
(CVE-2026-73710)
- ----------------------------------------------------------------
  Vulnerabilities in an API endpoint of HPE Networking
  Fabric Composer could allow an unauthenticated remote
  attacker to conduct a denial-of-service (DoS) attack. Successful
  exploitation could allow an attacker to make limited
  unauthorized modifications to the underlying operating 
  system and disrupt the availability of the affected system, 
  requiring manual intervention to restore functionality.

  Internal References: VULN-903, VULN-926
  Severity: High
  CVSS v3.1 Base Score: 8.2
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at 
                    HPE Networking.


Improper Privilege Assignment allows Administrative Access in 
HPE Networking Fabric Composer
(CVE-2026-73711)
- ----------------------------------------------------------------
  A vulnerability exists in the authentication processing logic 
  of Fabric Composer that may allow for incorrect privilege 
  assignment. An unauthenticated remote attacker capable of 
  influencing authentication responses could exploit this 
  vulnerability by providing specially crafted authentication 
  attributes. Successful exploitation could result in privilege 
  escalation, allowing a user to gain administrative access to 
  the system.
  
  Internal References: VULN-864
  Severity: High
  CVSS v3.1 Base Score: 8.1
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Remote Code Execution in HPE Networking
Fabric Composer API
(CVE-2026-73712)
- ----------------------------------------------------------------
  A vulnerability in the API of HPE Networking Fabric
  Composer could allow an unauthenticated remote attacker to
  run arbitrary commands on the underlying host if certain
  preconditions outside of the attacker's control are met.
  Successful exploitation of this vulnerability could allow
  an attacker to execute arbitrary commands on the underlying
  operating system leading to complete system compromise.

  Internal References: VULN-872
  Severity: High
  CVSS v3.1 Base Score: 8.1
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Local Privilege Escalation Vulnerabilities in HPE Networking
Fabric Composer
(CVE-2026-73713)
- ----------------------------------------------------------------
  Local privilege-escalation vulnerabilities have been
  discovered in HPE Networking Fabric Composer.
  Successful exploitation of these vulnerabilities could
  allow a local attacker to achieve arbitrary code execution
  with root privileges on the underlying operating system of
  the affected system.

  Internal References: VULN-871, VULN-944, VULN-849, VULN-910, 
  VULN-868, VULN-867

  Severity: High
  CVSS v3.1 Base Score: 7.8
  CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at 
                    HPE Networking.


Authenticated Sensitive Information Disclosure in HPE Networking
Fabric Composer API
(CVE-2026-73714)
- ----------------------------------------------------------------
  A sensitive information disclosure vulnerability exists in
  the API of HPE Networking Fabric Composer.
  Successful exploitation could allow an authenticated low
  privilege operator user to access data beyond what is
  authorized by the user's existing privilege level,
  potentially leading to further unauthorized access.

  Internal References: VULN-880
  Severity: High
  CVSS v3.1 Base Score: 7.6
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Denial-of-Service (DoS) Vulnerability in
the API of HPE Networking Fabric Composer
(CVE-2026-73715)
- ----------------------------------------------------------------
  A vulnerability in the API of HPE Networking Fabric
  Composer could allow an unauthenticated remote attacker to
  conduct a denial-of-service (DoS) attack. Successful exploitation
  could allow an attacker to disrupt the availability of the
  affected interface.

  Internal References: VULN-846, VULN-847, VULN-889
  Severity: High
  CVSS v3.1 Base Score: 7.5
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at HPE Networking.


Unauthenticated Remote Code Execution in HPE Networking
Fabric Composer
(CVE-2026-73716)
- ----------------------------------------------------------------
  A remote code execution vulnerability exists in the
  underlying operating system of HPE Networking Fabric
  Composer that could allow an unauthenticated remote
  attacker to run arbitrary commands on the underlying host
  if certain preconditions outside of the attacker's control
  are met. Successful exploitation could allow an attacker to
  execute arbitrary commands as a privileged user on the
  underlying operating system, leading to complete compromise
  of the HPE Networking Fabric Composer host.

  Internal References: VULN-915
  Severity: High
  CVSS v3.1 Base Score: 7.5
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Command Injection Vulnerability in HPE
Aruba Networking Fabric Composer Web-Based Management
Interface
(CVE-2026-73717)
- ----------------------------------------------------------------
  A command injection vulnerability exists in the web-based
  management interface of HPE Networking Fabric
  Composer that could allow an unauthenticated remote
  attacker to run arbitrary commands on the underlying host
  if certain preconditions outside of the attacker's control
  are met. Successful exploitation could allow an attacker to
  execute arbitrary commands on the underlying operating
  system leading to complete system compromise.

  Internal References: VULN-925
  Severity: High
  CVSS v3.1 Base Score: 7.5
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.

  
Unauthenticated Information Disclosure in Web Interface
allows Sensitive Data Exposure in HPE Networking
Fabric Composer
(CVE-2026-73718)
- ----------------------------------------------------------------
  A vulnerability in the web-based management interface of
  HPE Networking Fabric Composer could allow an
  unauthenticated remote attacker to access sensitive
  information if the attacker can convince an authenticated
  user of the interface to interact with a specially crafted
  URL. Successful exploitation could allow an attacker to
  retrieve information which could be used to potentially
  gain further access to network services supported by HPE
  Aruba Networking Fabric Composer.

  Internal References: VULN-874
  Severity: High
  CVSS v3.1 Base Score: 7.4
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Arbitrary File Write Vulnerability leads to
Remote Code Execution in HPE Networking Fabric
Composer
(CVE-2026-73719)
- ----------------------------------------------------------------
  An arbitrary file write vulnerability exists in the API of
  HPE Networking Fabric Composer and could allow an
  authenticated administrative user to escalate
  privileges. Successful exploitation of this vulnerability
  may enable the attacker to execute arbitrary system
  commands with root privileges on the underlying operating
  system.

  Internal References: VULN-860
  Severity: High
  CVSS v3.1 Base Score: 7.2
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Insecure File Handling allows Remote Code
Execution in HPE Networking Fabric Composer API
(CVE-2026-73720)
- ----------------------------------------------------------------
  Insecure file operations in the API of HPE Networking
  Fabric Composer could allow an authenticated remote
  attacker to achieve remote code execution. Successful
  exploitation could allow an attacker to execute arbitrary
  commands as a privileged user on the underlying operating
  system.

  Internal References: VULN-844
  Severity: High
  CVSS v3.1 Base Score: 7.2
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated SQL Injection Vulnerabilities in HPE Networking
Fabric Composer
(CVE-2026-73721)
- ----------------------------------------------------------------
  Vulnerabilities in the API of HPE Networking Fabric
  Composer could allow an authenticated remote attacker to
  conduct SQL injection attacks against the HPE Networking
  Fabric Composer instance. An attacker could
  exploit these vulnerabilities to obtain and modify
  sensitive information in the underlying database
  potentially leading to complete compromise of the HPE Networking
  Fabric Composer host.

  Internal References: VULN-902, VULN-941
  Severity: High
  CVSS v3.1 Base Score: 7.2
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at
                    HPE Networking.


Authenticated Command Injection Vulnerabilities in HPE
Aruba Networking Fabric Composer Web-Based Management
Interface
(CVE-2026-73722)
- ----------------------------------------------------------------
  Command injection vulnerabilities in the web-based
  management interface of HPE Networking Fabric
  Composer could allow an authenticated remote attacker to
  perform command injection against the affected system.
  Successful exploitation could allow an attacker to execute
  arbitrary commands as a privileged user on the underlying
  operating system.

  Internal References: VULN-897, VULN-929, VULN-936, VULN-866
  Severity: High
  CVSS v3.1 Base Score: 7.2
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at
                    HPE Networking.


Authenticated Privilege Escalation Leading to Unauthorized
State Changes in HPE Networking Fabric Composer
Web-Based Management Interface
(CVE-2026-73723)
- ----------------------------------------------------------------
  A privilege escalation vulnerability exists in the
  web-based management interface of HPE Networking
  Fabric Composer. Successful exploitation could allow an
  authenticated low-privilege operator user to complete
  state-changing actions that should not be allowed by their
  current level of authorization on the platform.

  Internal References: VULN-873
  Severity: High
  CVSS v3.1 Base Score: 7.1
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Privilege Escalation via Broken Access
Control in HPE Networking Fabric Composer
(CVE-2026-73724)
- ----------------------------------------------------------------
  Privilege escalation vulnerabilities exist in the API of
  HPE Networking Fabric Composer. Successful
  exploitation could allow an authenticated low privilege
  operator user to change the state of certain settings of a
  vulnerable system.

  Internal References: VULN-890, VULN-938
  Severity: High
  CVSS v3.1 Base Score: 7.1
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at
                    HPE Networking.


Local Privilege Escalation leads to Arbitrary Code
Execution in HPE Networking Fabric Composer
(CVE-2026-73725)
- ----------------------------------------------------------------
  A local privilege-escalation vulnerability has been
  discovered in HPE Networking Fabric Composer.
  Successful exploitation of this vulnerability could allow a
  local attacker to achieve arbitrary code execution with
  root privileges, leading to a complete compromise of the
  affected host.

  Internal References: VULN-850
  Severity: High
  CVSS v3.1 Base Score: 7.0
  CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

  Acknowledgements: This vulnerability was discovered by 
                    internal security research at 
                    HPE Networking.


Authentication Bypass in HPE Networking Fabric
Composer allows Unauthorized Administrative Access
(CVE-2026-73726)
- ----------------------------------------------------------------
  A vulnerability has been identified in the underlying
  operating system of HPE Networking Fabric Composer
  that could potentially allow an unauthenticated adjacent
  actor to circumvent existing authentication controls.
  Successful exploitation could allow an attacker to gain
  administrative access, modify system configurations, and
  access or manipulate sensitive data.

  Internal References: VULN-878
  Severity: Medium
  CVSS v3.1 Base Score: 6.8
  CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Information Disclosure in HPE Networking
Fabric Composer Web-Based Management Interface
(CVE-2026-73727)
- ----------------------------------------------------------------
  A vulnerability in the web-based management interface of
  HPE Networking Fabric Composer could allow an
  authenticated low-privilege operator user to access
  sensitive information. A successful exploit allows an
  attacker to retrieve information beyond what is authorized
  by the user's existing privilege level, which could be used
  to potentially gain further access on the affected system.

  Internal References: VULN-893, VULN-865, VULN-907, VULN-933, 
                       VULN-943, VULN-932
  Severity: Medium
  CVSS v3.1 Base Score: 6.5
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Denial-of-Service (DoS) Vulnerabilities in HPE
Aruba Networking Fabric Composer API
(CVE-2026-73728)
- ----------------------------------------------------------------
  Denial-of-service (DoS) vulnerabilities exist in the API of HPE
  Aruba Networking Fabric Composer that could allow an
  authenticated low-privilege operator user to cause a denial
  of service. Successful exploitation could allow an attacker
  to interrupt the normal operation of the affected service.

  Internal References: VULN-896, VULN-937
  Severity: Medium
  CVSS v3.1 Base Score: 6.5
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at
                    HPE Networking.


Authenticated Sensitive Information Disclosure in HPE Networking
Fabric Composer
(CVE-2026-73729)
- ----------------------------------------------------------------
  A vulnerability in the underlying operating system of HPE
  Aruba Networking Fabric Composer could allow an
  authenticated low-privilege operator user with local
  access to upstream AFC dependencies to view sensitive
  information. Successful exploitation could allow an
  attacker to access data beyond what is authorized by the
  user's existing privilege level, potentially leading to
  further unauthorized access.

  Internal References: VULN-922
  Severity: Medium
  CVSS v3.1 Base Score: 6.5
  CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Privilege Escalation via Broken Access
Control in HPE Networking Fabric Composer API
(CVE-2026-73730)
- ----------------------------------------------------------------
  A privilege escalation vulnerability exists in the API of
  HPE Networking Fabric Composer. Successful
  exploitation could allow an authenticated low privilege
  operator user to change the state of certain settings of a
  vulnerable system.

  Internal References: VULN-898, VULN-908, VULN-942
  Severity: Medium
  CVSS v3.1 Base Score: 6.5
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Reflected Cross-Site Scripting (XSS)
Vulnerability in HPE Networking Fabric Composer
Web-Based Management Interface
(CVE-2026-73731)
- ----------------------------------------------------------------
  A vulnerability in the web-based management interface of
  HPE Networking Fabric Composer could allow an
  unauthenticated remote attacker to conduct a reflected
  cross-site scripting (XSS) attack against a user of the
  interface. A successful exploit could allow an attacker to
  execute arbitrary script code in a victim's browser in the
  context of the affected interface.

  Internal References: VULN-882
  Severity: Medium
  CVSS v3.1 Base Score: 6.1
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Local Authenticated Sensitive Information Disclosure in HPE
Aruba Networking Fabric Composer
(CVE-2026-73732)
- ----------------------------------------------------------------
  A vulnerability in the underlying operating system of HPE
  Aruba Networking Fabric Composer could allow an
  authenticated low-privilege operator user with local access
  to obtain sensitive information. Successful exploitation
  could allow an attacker to retrieve sensitive data which
  could be used to gain further unauthorized access to the
  affected system and to other systems it interacts with.

  Internal References: VULN-921
  Severity: Medium
  CVSS v3.1 Base Score: 5.6
  CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Improper Session Invalidation in API allow Continued
Authenticated Access in HPE Networking Fabric
Composer
(CVE-2026-73733)
- ----------------------------------------------------------------
  Authentication bypasses in the API of HPE Networking
  Fabric Composer could allow an authenticated low privilege
  operator user to circumvent existing authentication
  controls. Successful exploitation could allow an attacker
  to retain limited access to the affected system after that
  access should have been revoked.

  Internal References: VULN-861, VULN-901
  Severity: Medium
  CVSS v3.1 Base Score: 5.4
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Open Redirect allows URL Manipulation in
HPE Networking Fabric Composer Web Interface
(CVE-2026-73734)
- ----------------------------------------------------------------
  A vulnerability in the web-based management interface of
  HPE Networking Fabric Composer could allow an
  unauthenticated remote attacker to redirect users to an
  arbitrary URL.

  Internal References: VULN-886
  Severity: Medium
  CVSS v3.1 Base Score: 5.4
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Access Control Vulnerabilities allow
Information Disclosure in HPE Networking Fabric
Composer API
(CVE-2026-73735)
- ----------------------------------------------------------------
  Vulnerabilities in the API of HPE Networking Fabric
  Composer could allow an authenticated low privilege
  operator user to access some information beyond their
  privilege level. Successful exploitation could allow an
  attacker to obtain limited information and/or make limited
  changes beyond what is authorized by the user's existing
  privilege level.

  Internal References: VULN-900, VULN-940
  Severity: Medium
  CVSS v3.1 Base Score: 5.4
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

  Acknowledgements: These vulnerabilities were discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Limited Information Disclosure leads to
Data Exposure in HPE Networking Fabric Composer
(CVE-2026-73736)
- ----------------------------------------------------------------
  A vulnerability in the web-based management interface of
  HPE Networking Fabric Composer could allow an
  unauthenticated remote attacker to view some system files.
  Successful exploitation could allow an attacker to read
  files within the affected directory.

  Internal References: VULN-854, VULN-884, VULN-885, VULN-905, 
                       VULN-935

  Severity: Medium
  CVSS v3.1 Base Score: 5.3
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.
  

Unauthenticated Path Traversal in HPE Networking
Fabric Composer API Endpoint Allows Unauthorized File
Modification
(CVE-2026-73737)
- ----------------------------------------------------------------
  An unauthenticated path traversal vulnerability exists in
  the API endpoint of HPE Networking Fabric Composer.
  Successful exploitation could allow an unauthenticated
  adjacent attacker to manipulate user generated files,
  potentially leading to unauthorized changes in critical
  system configurations, if certain preconditions outside of
  the attacker's control are met.

  Internal References: VULN-863
  Severity: Medium
  CVSS v3.1 Base Score: 4.8
  CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Sensitive Information Disclosure in HPE Networking
Fabric Composer
(CVE-2026-73738)
- ----------------------------------------------------------------
  A vulnerability in the underlying operating system of HPE
  Aruba Networking Fabric Composer could allow an
  authenticated low-privilege operator user with local access
  to view sensitive information. Successful exploitation
  could allow an attacker to retrieve information which could
  be used to potentially gain further privileges on the
  affected system.

  Internal References: VULN-877
  Severity: Medium
  CVSS v3.1 Base Score: 4.7
  CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Sensitive Information Disclosure in HPE Networking
Fabric Composer API
(CVE-2026-73739)
- ----------------------------------------------------------------
  A vulnerability exists in the API of HPE Networking
  Fabric Composer that allows for an attacker with
  administrative privileges to access sensitive information
  in a cleartext format. A successful exploit allows an
  attacker to retrieve sensitive information that was
  expected to remain protected within the affected system.

  Internal References: VULN-845, VULN-851, VULN-857, VULN-888, 
                       VULN-856
  Severity: Medium
  CVSS v3.1 Base Score: 4.4
  CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Local Privilege Escalation in HPE Networking Fabric
Composer
(CVE-2026-73740)
- ----------------------------------------------------------------
  A local privilege escalation vulnerability in HPE Networking
  Fabric Composer could allow an authenticated
  privileged user on the underlying host to elevate their
  user privileges to those of a higher role. A successful
  exploit allows the attacker to change the state of certain
  settings of the affected system.

  Internal References: VULN-869
  Severity: Medium
  CVSS v3.1 Base Score: 4.4
  CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Limited File Read allows Data Exposure in HPE
Aruba Networking Fabric Composer API
(CVE-2026-73741)
- ----------------------------------------------------------------
  A vulnerability in the API of HPE Networking Fabric
  Composer could allow an authenticated low privilege
  operator user to view some system files. Successful
  exploitation could allow an attacker to access limited data
  beyond what is authorized by the user's existing privilege
  level.

  Internal References: VULN-881
  Severity: Medium
  CVSS v3.1 Base Score: 4.3
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Improper Client Address Validation allows Request
Attribution Spoofing in Fabric Composer API Endpoint
(CVE-2026-73742)
- ----------------------------------------------------------------
  A vulnerability in an API endpoint of HPE Networking
  Fabric Composer could allow an authenticated low privilege
  operator user to spoof the source address attributed to
  their requests. Successful exploitation could allow an
  attacker to cause inaccurate attribution information to be
  recorded on the affected system.

  Internal References: VULN-939
  Severity: Medium
  CVSS v3.1 Base Score: 4.3
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Information Disclosure Leading to Data
Exposure in HPE Networking Fabric Composer
(CVE-2026-73743)
- ----------------------------------------------------------------
  A vulnerability in the web-based management interface of
  HPE Networking Fabric Composer could allow an
  unauthenticated remote attacker to gain insight into some
  data handled by the affected interface. A successful
  exploit could allow an attacker to gain access to some data
  in a cleartext format possibly exposing other network
  infrastructure to further compromise.

  Internal References: VULN-875
  Severity: Low
  CVSS v3.1 Base Score: 3.7
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Denial-of-Service (DoS) Vulnerability in HPE Networking
Fabric Composer Web-Based Management Interface
(CVE-2026-73744)
- ----------------------------------------------------------------
  A denial-of-service (DoS) vulnerability exists in the web-based
  management interface of HPE Networking Fabric
  Composer that could allow an authenticated low privilege
  operator user to cause a denial-of-service (DoS). Successful
  exploitation could allow an attacker to disrupt the
  availability of the affected interface.

  Internal References: VULN-853
  Severity: Low
  CVSS v3.1 Base Score: 3.5
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Unauthenticated Limited Information Disclosure allows Data
Exposure in the API of HPE Networking Fabric Composer
(CVE-2026-73745)
- ----------------------------------------------------------------
  A vulnerability in the API endpoint of HPE Networking
  Fabric Composer could allow an unauthenticated remote
  attacker to view some information handled by the affected
  system. Successful exploitation could allow an attacker to
  gain insight into internal services and workflows,
  increasing the risk of unauthorized access when combined
  with other vulnerabilities.

  Internal References: VULN-883
  Severity: Low
  CVSS v3.1 Base Score: 3.1
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Denial-of-Service (DoS) Vulnerability in HPE Networking
Fabric Composer API
(CVE-2026-73746)
- ----------------------------------------------------------------
  A denial-of-service (DoS) vulnerability exists in the API of HPE
  Aruba Networking Fabric Composer that could allow an
  authenticated low-privilege operator user to cause a denial
  of service. Successful exploitation could allow an attacker
  to interrupt the normal operation of the affected service.

  Internal References: VULN-887
  Severity: Low
  CVSS v3.1 Base Score: 3.1
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Local Privilege Escalation Vulnerability in HPE Networking
Fabric Composer
(CVE-2026-73747)
- ----------------------------------------------------------------
  A local privilege-escalation vulnerability has been
  discovered in HPE Networking Fabric Composer.
  Successful exploitation could allow an authenticated low
  privilege operator user with local access to elevate their
  user privileges and make limited modifications on the
  affected system.

  Internal References: VULN-852
  Severity: Low
  CVSS v3.1 Base Score: 2.5
  CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


Authenticated Sensitive Information Disclosure in HPE Networking
Fabric Composer
(CVE-2026-73748)
- ----------------------------------------------------------------
  A vulnerability in the affected interface of HPE Networking
  Fabric Composer allows an attacker with
  administrative privileges to access sensitive information
  in a cleartext format. A successful exploit allows an
  attacker to retrieve information which could be used to
  potentially gain further access to network services
  supported by HPE Networking Fabric Composer.

  Internal References: VULN-848
  Severity: Low
  CVSS v3.1 Base Score: 2.2
  CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

  Acknowledgements: This vulnerability was discovered by
                    internal security research at
                    HPE Networking.


References
==========
CVE-2026-76657, CVE-2026-76658, CVE-2026-19766, CVE-2026-73700, 
CVE-2026-73701, CVE-2026-73702, CVE-2026-73703, CVE-2026-73704, 
CVE-2026-73705, CVE-2026-73706, CVE-2026-73707, CVE-2026-73708, 
CVE-2026-73709, CVE-2026-73710, CVE-2026-73711, CVE-2026-73712, 
CVE-2026-73713, CVE-2026-73714, CVE-2026-73715, CVE-2026-73716, 
CVE-2026-73717, CVE-2026-73718, CVE-2026-73719, CVE-2026-73720, 
CVE-2026-73721, CVE-2026-73722, CVE-2026-73723, CVE-2026-73724, 
CVE-2026-73725, CVE-2026-73726, CVE-2026-73727, CVE-2026-73728, 
CVE-2026-73729, CVE-2026-73730, CVE-2026-73731, CVE-2026-73732, 
CVE-2026-73733, CVE-2026-73734, CVE-2026-73735, CVE-2026-73736, 
CVE-2026-73737, CVE-2026-73738, CVE-2026-73739, CVE-2026-73740, 
CVE-2026-73741, CVE-2026-73742, CVE-2026-73743, CVE-2026-73744, 
CVE-2026-73745, CVE-2026-73746, CVE-2026-73747, CVE-2026-73748.

-----BEGIN PGP SIGNATURE-----
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=+UX5
-----END PGP SIGNATURE-----