Paper/Archive/CVE-2026-76658

CVE-2026-76658

Hewlett Packard Enterprise (HPE) Fabric Composer — Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon

EPSS 0.7%CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 54.9.549 × 2011.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.

Affected

ProductAffectedFixed inSource

Fabric Composer7.0.0 – 7.3.3–CNA

Scores by source

hpe (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US