CVE-2026-73740

A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user privileges to those of a higher role. A successful exploit allows the attacker to change the state of certain settings of the affected system.

Score

CVSS 3.1 4.4 Medium

Status

Analyzed - security-alert@hpe.com

Published

2026-09-01

Last modified

2026-09-01

Weaknesses

CWE-269

Affected products

• Fabric Composer (Arubanetworks)
• Fabric Composer (Hewlett Packard Enterprise Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US