CVE-2026-73722: Vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer

This vulnerability involves command injection in the web management interface of HPE Fabric Composer 7.0.0. An attacker with authentication can inject commands that the system executes with elevated privileges, potentially compromising the system's confidentiality, integrity, and availability. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported, and no vendor advisory or patch is currently available.

Successful exploitation allows an authenticated attacker to execute arbitrary commands as a privileged user on the underlying operating system, leading to full system compromise. This impacts confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the web-based management interface to trusted administrators only and monitor for suspicious activity. Avoid exposing the management interface to untrusted networks.