Threats Tagged 'cve-2026-73729'

Multiple vulnerabilities have been addressed in HPE Networking Fabric Composer, a product under Aruba Networks by Hewlett Packard Enterprise. The advisory from the Nationaal Cyber Security Centrum reports a total of 45 CVEs related to this product, covering a range of weaknesses including cross-site scripting, command injection, and authentication bypass. Specific affected versions are not detailed in the available information. No CVSS scores are provided, and there are no known exploits in the wild at this time.

CVE-2026-73729 is a vulnerability in the underlying operating system of HPE Networking Fabric Composer. It allows an authenticated low privilege operator user with local access to upstream AFC dependencies to view sensitive information beyond their authorized privilege level. The vulnerability does not require user interaction and has a medium severity score of 6.5.

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to upstream AFC dependencies to view sensitive information. Successful exploitation could allow an attacker to access data beyond what is authorized by the user's existing privilege level, potentially leading to further unauthorized access.