An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to… (CVE-2026-73705)

This vulnerability exists in the API of HPE Networking Fabric Composer and permits an authenticated user with low privilege operator rights to write arbitrary files. This arbitrary file write can be leveraged to escalate privileges and execute arbitrary commands on the host OS, resulting in complete compromise of the affected system. The CVSS 3.1 base score is 8.8, reflecting high severity with network attack vector, low attack complexity, and no user interaction required.

Successful exploitation can lead to privilege escalation and arbitrary command execution on the underlying operating system, which may result in total compromise of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.