Threats Tagged 'cve-2026-73727'

Multiple vulnerabilities have been addressed in HPE Networking Fabric Composer, a product under Aruba Networks by Hewlett Packard Enterprise. The advisory from the Nationaal Cyber Security Centrum reports a total of 45 CVEs related to this product, covering a range of weaknesses including cross-site scripting, command injection, and authentication bypass. Specific affected versions are not detailed in the available information. No CVSS scores are provided, and there are no known exploits in the wild at this time.

CVE-2026-73727 is a vulnerability in the API of HPE Networking Fabric Composer that allows an authenticated low privilege operator user to access sensitive information beyond their authorized level. This could potentially enable further unauthorized access to network services managed by the product. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A successful exploit allows an attacker to access data beyond what is authorized by the user's existing privilege level, which could be used to potentially gain further access to network services supported by HPE Networking Fabric Composer.