An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative user to… (CVE-2026-73719)

CVE-2026-73719 describes an arbitrary file write vulnerability in the API of HPE Networking Fabric Composer. An authenticated administrative user could exploit this vulnerability to escalate privileges and execute arbitrary system commands with root privileges on the underlying operating system. The CVSS 3.1 base score is 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No specific affected versions or patch details are provided in the available data.

Successful exploitation allows an authenticated administrative user to escalate privileges to root level and execute arbitrary system commands on the underlying OS. This could lead to full system compromise, including confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, limit administrative API access to trusted users only.