Threats Tagged 'cve-2026-73718'

Multiple vulnerabilities have been addressed in HPE Networking Fabric Composer, a product under Aruba Networks by Hewlett Packard Enterprise. The advisory from the Nationaal Cyber Security Centrum reports a total of 45 CVEs related to this product, covering a range of weaknesses including cross-site scripting, command injection, and authentication bypass. Specific affected versions are not detailed in the available information. No CVSS scores are provided, and there are no known exploits in the wild at this time.

A vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to access sensitive information by tricking an authenticated user into interacting with a crafted URL. This could lead to information disclosure that might enable further network access.

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking Fabric Composer.