Threat database

A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to obtain elevated privileges and modify settings beyond what is authorized by the user's existing privilege level on a vulnerable system.

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform, including changes to the configuration of systems managed by the affected product.

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system. Successful exploitation could allow an attacker to gain insight into internal services and workflows and to make unauthorized changes that may disrupt the normal operation of the affected service.

An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary commands on the underlying operating system, leading to complete compromise of the affected system.

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system.

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected system. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access when combined with other vulnerabilities.

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete system compromise.

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the HPE Networking Fabric Composer host.

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the AFC host.

A denial of service vulnerability exists in Hewlett Packard Enterprise Integrated Lights-Out 6 (iLO 6) firmware versions prior to 1.78. This issue could allow an attacker to disrupt availability without requiring privileges or user interaction. The vulnerability has a medium severity rating with a CVSS score of 6.5. No official patch or remediation guidance has been provided yet by the vendor.

Multiple vulnerabilities in the REST API of HPE EdgeConnect SD-WAN Orchestrator versions 9.6.2.00000 and 9.6.3.00000 allow unauthenticated remote attackers to bypass web authentication and access system functions. Exploitation could lead to viewing and modifying sensitive information. The vulnerabilities have a critical CVSS score of 9.8. No official patch or remediation guidance is currently provided by the vendor.

Multiple vulnerabilities in the REST API interface of Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchestrator allow unauthenticated remote attackers to bypass web authentication and access system functions. Exploitation could lead to viewing and modifying sensitive information on the affected system. The vulnerabilities affect specific versions 9.6.2.00000 and 9.6.3.00000. The issue has a critical severity with a CVSS score of 9.8. No official patch or remediation guidance has been provided yet.

CVE-2026-44879 is a command injection vulnerability in the command line interface of Hewlett Packard Enterprise EdgeConnect SD-WAN Gateway (ECOS) devices. It allows a highly privileged, authenticated remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability affects versions 9.4.0.0 and 9.5.0.0. The CVSS v3.1 base score is 7.2, indicating high severity. No official patch or remediation guidance has been provided yet.

CVE-2026-44878 is a high-severity vulnerability in the web-based management interface of Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS). It allows a highly privileged, authenticated remote attacker to access the device's filesystem. Exploiting this flaw could enable the attacker to access sensitive files and tamper with or delete system data. The vulnerability affects versions 9.4.0.0, 9.5.0.0, and 9.6.0.0 of the product. There is no official patch or remediation level currently provided by the vendor. No known exploits are reported in the wild at this time.

An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to remote code execution.

Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities could allow a remote high-privileged user to execute arbitrary code as a privileged user on the underlying operating system.

CVE-2026-44880 is a buffer overflow vulnerability in the command line interface of Hewlett Packard Enterprise (HPE) AOS-CX. Exploitation could allow a remote low-privileged user to execute arbitrary code with privileged access on the underlying operating system. The vulnerability has a high severity with a CVSS score of 8.8. It affects specific versions of AOS-CX including 10.13.0000, 10.16.0000, 10.17.0000, and 10.18.0000. No patch or official remediation information is currently provided.