CVE-2026-19766: Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
Published Sep 1, 2026
·Updated
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the AFC host.
Affected Software
1 affected component
HPE Networking Fabric Composer
Event History
Sep 1, 2026
CVE Published
via MITRE·07:30 PM
Data Sourced
via MITRE·07:30 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this vulnerability?
An unauthenticated attacker on an adjacent network can exploit it. No privileges or user interaction are required.
2
What level of access could successful exploitation provide?
Successful exploitation can allow arbitrary code execution as a privileged user on the underlying operating system. This can result in complete compromise of the AFC host.