CVE-2026-73717

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer (affected versions not specified)

Description A command injection flaw in the web-based management interface allows an unauthenticated remote attacker to execute arbitrary commands on the underlying host operating system. This occurs when specific preconditions outside the attacker's control are met, potentially leading to a complete system compromise. Command injection is a flaw that allows an attacker to execute arbitrary system commands on a host operating system via a vulnerable application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.