CVE-2026-73721: Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric Composer
Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the HPE Networking Fabric Composer host.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
An attacker must be authenticated to the HPE Networking Fabric Composer API and able to reach the instance remotely. No user interaction is required.
What could exploitation allow?
Successful SQL injection could let an attacker obtain and modify sensitive information in the underlying database. The impact could potentially extend to complete compromise of the HPE Networking Fabric Composer host.