Vulnerability Details CVE-2026-73704
A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 22.6%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-73704
-
cpe:2.3:a:arubanetworks:fabric_composer:6.0.0
-
cpe:2.3:a:arubanetworks:fabric_composer:6.0.1
-
cpe:2.3:a:arubanetworks:fabric_composer:6.0.2
-
cpe:2.3:a:arubanetworks:fabric_composer:6.1.0
-
cpe:2.3:a:arubanetworks:fabric_composer:6.1.1
-
cpe:2.3:a:arubanetworks:fabric_composer:6.1.2
-
cpe:2.3:a:arubanetworks:fabric_composer:6.2.0
-
cpe:2.3:a:arubanetworks:fabric_composer:6.2.1
-
cpe:2.3:a:arubanetworks:fabric_composer:6.2.2
-
cpe:2.3:a:arubanetworks:fabric_composer:6.3.0
-
cpe:2.3:a:arubanetworks:fabric_composer:6.3.1
-
cpe:2.3:a:arubanetworks:fabric_composer:6.3.2
-
cpe:2.3:a:arubanetworks:fabric_composer:6.4.0
-
cpe:2.3:a:arubanetworks:fabric_composer:6.4.1
-
cpe:2.3:a:arubanetworks:fabric_composer:6.4.2
-
cpe:2.3:a:arubanetworks:fabric_composer:6.4.3
-
cpe:2.3:a:arubanetworks:fabric_composer:6.5.0
-
cpe:2.3:a:arubanetworks:fabric_composer:6.5.1
-
cpe:2.3:a:arubanetworks:fabric_composer:6.5.2
-
cpe:2.3:a:arubanetworks:fabric_composer:6.5.3
-
cpe:2.3:a:arubanetworks:fabric_composer:6.6.0
-
cpe:2.3:a:arubanetworks:fabric_composer:6.6.1
-
cpe:2.3:a:arubanetworks:fabric_composer:6.6.2
-
cpe:2.3:a:arubanetworks:fabric_composer:7.0.0
-
cpe:2.3:a:arubanetworks:fabric_composer:7.0.1
-
cpe:2.3:a:arubanetworks:fabric_composer:7.0.2
-
cpe:2.3:a:arubanetworks:fabric_composer:7.0.3
-
cpe:2.3:a:arubanetworks:fabric_composer:7.0.4
-
cpe:2.3:a:arubanetworks:fabric_composer:7.0.5
-
cpe:2.3:a:arubanetworks:fabric_composer:7.0.6
-
cpe:2.3:a:arubanetworks:fabric_composer:7.1.0
-
cpe:2.3:a:arubanetworks:fabric_composer:7.1.1
-
cpe:2.3:a:arubanetworks:fabric_composer:7.1.2
-
cpe:2.3:a:arubanetworks:fabric_composer:7.1.3
-
cpe:2.3:a:arubanetworks:fabric_composer:7.2.0
-
cpe:2.3:a:arubanetworks:fabric_composer:7.2.1
-
cpe:2.3:a:arubanetworks:fabric_composer:7.2.2
-
cpe:2.3:a:arubanetworks:fabric_composer:7.2.3
-
cpe:2.3:a:arubanetworks:fabric_composer:7.3.0
-
cpe:2.3:a:arubanetworks:fabric_composer:7.3.1
-
cpe:2.3:a:arubanetworks:fabric_composer:7.3.2
-
cpe:2.3:a:arubanetworks:fabric_composer:7.3.3