CVE-2026-23592 — Insecure File Handling allows Remote Code Execution in Backup Functionality

CVE-2026-23592

Insecure File Handling allows Remote Code Execution in Backup Functionality PUBLISHED

Description (CNA)

Insecure file operations in HPE Aruba Networking Fabric Composerâ€™s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Aruba Networking Fabric Composer	affected 7.0.0 through 7.2.3

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04996en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.