CVE-2026-73723: Arubanetworks Fabric Composer

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform.

Affected products

• Arubanetworks Fabric Composer: before 7.3.4 (fixed in 7.3.4)

Published 2026-09-01. Last modified 2026-09-02.