CVE-2026-76658: Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon
A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated remote attacker could exploit the vulnerable SSH daemon. No prior privileges or user interaction are required according to the supplied severity vector.
What level of access could exploitation provide?
Successful exploitation could grant administrative access to a vulnerable AFC host and allow arbitrary commands to run as a privileged operating-system user. This can result in complete system compromise.
What is the likely operational impact?
The supplied severity vector indicates network reachability, low attack complexity, no required privileges, and no user interaction. It also indicates high impact to confidentiality, integrity, and availability, with scope changed.