CVE-2026-73723 — Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based…

CVE-2026-73723

Authenticated Privilege Escalation Leading to Unauthorized State Changes in HPE Networking Fabric Composer Web-Based Management Interface PUBLISHED

Description (CNA)

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Fabric Composer	affected 7.0.0 through 7.3.3

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.