CVE-2026-73704EPSS p43.1%

CVE-2026-73704CVE-2026-73704

arubanetworks / fabric_composer

Description

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system.

Scoring

CVSS 8.8 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.53% probability of exploitation · percentile 43.1% · 2026-10-05T12:00:23Z
Last modified2026-09-02
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.