CVE-2026-73707: Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API
Published Sep 1, 2026
·Updated
Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform, including changes to the configuration of systems managed by the affected product.
Affected Software
1 affected component
HPE HPE Networking Fabric Composer API
Event History
Sep 1, 2026
CVE Published
via MITRE·07:46 PM
Data Sourced
via MITRE·07:46 PM
DescriptionSeverity