CVE-2026-73709 — Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process

CVE-2026-73709

Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process PUBLISHED

Description (CNA)

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Fabric Composer	affected 7.0.0 through 7.3.3

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.