CVE-2026-73704

CVE-2026-73704

A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

References

Frequently asked questions

What is CVE-2026-73704?
CVE-2026-73704 is a high-severity vulnerability. CVSS score: 8.8/10. Published 2026-09-01.
How severe is CVE-2026-73704?
High severity. CVSS v3 base score is 8.8 out of 10.