Threats Tagged 'cve-2026-73700'

Multiple vulnerabilities have been addressed in HPE Networking Fabric Composer, a product under Aruba Networks by Hewlett Packard Enterprise. The advisory from the Nationaal Cyber Security Centrum reports a total of 45 CVEs related to this product, covering a range of weaknesses including cross-site scripting, command injection, and authentication bypass. Specific affected versions are not detailed in the available information. No CVSS scores are provided, and there are no known exploits in the wild at this time.

CVE-2026-73700 is a critical stored cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer. It allows an authenticated low privilege operator user to inject malicious script code that executes in the context of an administrative user's browser. This could lead to arbitrary script execution with high impact on confidentiality, integrity, and availability of the affected interface.

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.