CVE-2026-73701

Katalog CVE

CVSS 9.0 · Critical EPSS 0,67%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada arubanetworks fabric composer. Skor CVSS 3.1 9.0 (Critical) menurut hpe.com.

Deskripsi (NVD)

An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and could be exploited if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the HPE Networking Fabric Composer host.

Rincian

Terbit di NVD

1 September 2026

Terakhir diubah

2 September 2026

Status NVD

Analyzed

CVSS 3.1

9.0 (Critical), sumber hpe.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

0,67% peluang dieksploitasi; lebih tinggi dari 50,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US advisory vendor