CVE-2026-73723: Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interface
Published Sep 1, 2026
·Updated
A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform.
Affected Software
1 affected component
HPE Networking Fabric Composer
Event History
Sep 1, 2026
CVE Published
via MITRE·07:46 PM
Data Sourced
via MITRE·07:46 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated to the web-based management interface as a low-privilege operator user. No user interaction is required.
2
What security impact is indicated by the provided CVSS vector?
The vector indicates no confidentiality impact, high integrity impact, and low availability impact. Exploitation can enable unauthorized state-changing actions beyond the operator's intended authorization level.