Threats Tagged 'cve-2026-73706'

Multiple vulnerabilities have been addressed in HPE Networking Fabric Composer, a product under Aruba Networks by Hewlett Packard Enterprise. The advisory from the Nationaal Cyber Security Centrum reports a total of 45 CVEs related to this product, covering a range of weaknesses including cross-site scripting, command injection, and authentication bypass. Specific affected versions are not detailed in the available information. No CVSS scores are provided, and there are no known exploits in the wild at this time.

A vulnerability in the API of HPE Networking Fabric Composer allows unauthenticated remote attackers to obtain limited system information and change certain system settings. Exploiting this flaw could enable attackers to gain insight into internal services and workflows and make unauthorized changes that may disrupt normal service operation. The vulnerability has a high severity rating with a CVSS score of 8.6.

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system. Successful exploitation could allow an attacker to gain insight into internal services and workflows and to make unauthorized changes that may disrupt the normal operation of the affected service.