CVE-2026-73721 — Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric Composer

CVE-2026-73721

Authenticated SQL Injection Vulnerabilities in HPE Networking Fabric Composer PUBLISHED

Description (CNA)

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the HPE Networking Fabric Composer host.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Fabric Composer	affected 7.0.0 through 7.3.3

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.