Fabric Composer (Arubanetworks) - vulnerabilities (CVEs)
57 CVEs, 0 in the last 30 days, 45 known versions, newest CVE from 2026-09-01. Vendor: Arubanetworks.
CVEs of Fabric Composer
- CVE-2026-76658 - CVSS 10 (critical), 2026-09-01: A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain…
- CVE-2026-76657 - CVSS 10 (critical), 2026-09-01: Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to…
- CVE-2026-73748 - CVSS 2.2 (low), 2026-09-01: A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information…
- CVE-2026-73747 - CVSS 2.5 (low), 2026-09-01: A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low…
- CVE-2026-73746 - CVSS 3.1 (low), 2026-09-01: A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a…
- CVE-2026-73744 - CVSS 3.5 (low), 2026-09-01: A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low…
- CVE-2026-73743 - CVSS 3.7 (low), 2026-09-01: A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to gain insight into…
- CVE-2026-73742 - CVSS 4.3 (medium), 2026-09-01: A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address…
- CVE-2026-73741 - CVSS 4.3 (medium), 2026-09-01: A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful…
- CVE-2026-73740 - CVSS 4.4 (medium), 2026-09-01: A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate…
- CVE-2026-73739 - CVSS 4.4 (medium), 2026-09-01: A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sensitive information…
- CVE-2026-73738 - CVSS 4.7 (medium), 2026-09-01: A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local…
- CVE-2026-73737 - CVSS 4.8 (medium), 2026-09-01: An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an…
- CVE-2026-73736 - CVSS 5.3 (medium), 2026-09-01: A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system…
- CVE-2026-73735 - CVSS 5.4 (medium), 2026-09-01: Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some information beyond their…
- CVE-2026-73734 - CVSS 5.4 (medium), 2026-09-01: A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to redirect users to an…
- CVE-2026-73733 - CVSS 5.4 (medium), 2026-09-01: Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent existing…
- CVE-2026-73732 - CVSS 5.6 (medium), 2026-09-01: A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local…
- CVE-2026-73731 - CVSS 6.1 (medium), 2026-09-01: A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected…
- CVE-2026-73730 - CVSS 6.5 (medium), 2026-09-01: A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege…
- CVE-2026-73729 - CVSS 6.5 (medium), 2026-09-01: A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local…
- CVE-2026-73728 - CVSS 6.5 (medium), 2026-09-01: Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a…
- CVE-2026-73727 - CVSS 6.5 (medium), 2026-09-01: Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A…
- CVE-2026-73726 - CVSS 6.8 (medium), 2026-09-01: A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated…
- CVE-2026-73725 - CVSS 7 (high), 2026-09-01: A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a…
- CVE-2026-73724 - CVSS 7.1 (high), 2026-09-01: Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege…
- CVE-2026-73723 - CVSS 7.1 (high), 2026-09-01: A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an…
- CVE-2026-73722 - CVSS 7.2 (high), 2026-09-01: Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to…
- CVE-2026-73721 - CVSS 7.2 (high), 2026-09-01: Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE…
- CVE-2026-73720 - CVSS 7.2 (high), 2026-09-01: Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution.…
- CVE-2026-73719 - CVSS 7.2 (high), 2026-09-01: An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative user to escalate…
- CVE-2026-73718 - CVSS 7.4 (high), 2026-09-01: A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive…
- CVE-2026-73717 - CVSS 7.5 (high), 2026-09-01: A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote…
- CVE-2026-73716 - CVSS 7.5 (high), 2026-09-01: A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote…
- CVE-2026-73715 - CVSS 7.5 (high), 2026-09-01: A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful…
- CVE-2026-73714 - CVSS 7.6 (high), 2026-09-01: A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low…
- CVE-2026-73713 - CVSS 7.8 (high), 2026-09-01: Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could…
- CVE-2026-73712 - CVSS 8.1 (high), 2026-09-01: A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host…
- CVE-2026-73711 - CVSS 8.1 (high), 2026-09-01: A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated…
- CVE-2026-73710 - CVSS 8.2 (high), 2026-09-01: Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack.…
- CVE-2026-73709 - CVSS 8.3 (high), 2026-09-01: A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary…
- CVE-2026-73708 - CVSS 8.3 (high), 2026-09-01: A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege…
- CVE-2026-73707 - CVSS 8.5 (high), 2026-09-01: Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege…
- CVE-2026-73706 - CVSS 8.6 (high), 2026-09-01: A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change…
- CVE-2026-73705 - CVSS 8.8 (high), 2026-09-01: An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to escalate…
- CVE-2026-73704 - CVSS 8.8 (high), 2026-09-01: A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator…
- CVE-2026-73703 - CVSS 8.8 (high), 2026-09-01: A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored…
- CVE-2026-73745 - CVSS 3.1 (low), 2026-09-01: A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the…
- CVE-2026-73702 - CVSS 8.8 (high), 2026-09-01: A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege…
- CVE-2026-73701 - CVSS 9 (critical), 2026-09-01: An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if…
- CVE-2026-73700 - CVSS 9 (critical), 2026-09-01: A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a…
- CVE-2026-19766 - CVSS 9.6 (critical), 2026-09-01: An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an…
- CVE-2025-23056 - CVSS 5.5 (medium), 2025-01-28: A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored…
- CVE-2025-23055 - CVSS 5.5 (medium), 2025-01-28: A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored…
- CVE-2025-23054 - CVSS 6.5 (medium), 2025-01-28: A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticated low privilege operator user to…
- CVE-2025-23057 - CVSS 5.5 (medium), 2025-01-28: A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to conduct a stored…
- CVE-2025-23053 - CVSS 6.5 (medium), 2025-01-28: A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Composer. Successful exploitation could allow…