by Kastro
Paper/Archive/CVE-2026-76657

CVE-2026-76657

Hewlett Packard Enterprise (HPE) Fabric Composer — Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access

EPSS 0.7%CVSS 10.0
critical.is priorityof 100
41
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 54.8.548 × 2011.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the HPE Networking Fabric Composer host.

Affected

ProductAffectedFixed inSource
Fabric Composer7.0.0 – 7.3.3–CNA

Scores by source

hpe (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US