CVE-2026-73718: arubanetworks fabric composer

csirt@kutim:~/threat-intel/cve/CVE-2026-73718

CVSS 7.4 · High EPSS 0,23%

Kerentanan Cross-Site Request Forgery (CSRF) pada arubanetworks fabric composer. Skor CVSS 3.1 7.4 (High) menurut hpe.com.

Deskripsi (NVD)

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking Fabric Composer.

Rincian

Terbit di NVD: 1 September 2026
Terakhir diubah: 2 September 2026
Status NVD: Modified
CVSS 3.1: 7.4 (High), sumber hpe.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-352: Cross-Site Request Forgery (CSRF)
EPSS (30 hari): 0,23% peluang dieksploitasi; lebih tinggi dari 12,5% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
arubanetworks	fabric composer	Semua versi sebelum 7.3.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.