CVE-2026-73724: Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer
Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated low-privilege operator user can exploit the vulnerable API. The provided information does not indicate that unauthenticated attackers can use it.
What impact can successful exploitation have?
A successful attacker can change the state of certain settings on a vulnerable system. The supplied severity vector indicates integrity impact is high and availability impact is low, while no confidentiality impact is identified.
Does exploitation require user interaction or difficult conditions?
No user interaction is required, and the attack complexity is rated low. The vulnerability is reachable over the network, but the attacker must first hold low-privilege operator authentication.