CVEvulnerability

CVE-2026-73720

7.2 HIGH Published 2026-09-01 Modified 2026-09-02 Official page ↗
Status
Modified
Published
2026-09-01
Last modified
2026-09-02
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-73, CWE-78

Description

Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

Affected configurations

• arubanetworks fabric composer (< 7.3.4)

Related

Weakness · CWE (2)

  • CWE-73 External Control of File Name or Path weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References