CVE-2026-73702: Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric Composer
Published Sep 1, 2026
·Updated
A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete system compromise.
Affected Software
1 affected component
HPE HPE Networking Fabric Composer
Event History
Sep 1, 2026
CVE Published
via MITRE·07:32 PM
Data Sourced
via MITRE·07:32 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this vulnerability?
An authenticated user with low-privilege operator access can exploit the affected API to escalate to administrative permissions.
2
What is the potential impact after exploitation?
An attacker could obtain administrative-level permissions, which could lead to complete compromise of the Fabric Composer system.
3
Does exploitation require user interaction or local access?
No. The supplied CVSS vector indicates network-based exploitation with low attack complexity and no user interaction, but the attacker must already have low-privilege authenticated access.