Hewlett Packard Enterprise HPE HPE Aruba Networking Fabric Composer vulnerabilities

2 CVEs affecting Hewlett Packard Enterprise HPE HPE Aruba Networking Fabric Composer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-23593, published 2026-01-27.

More from Hewlett Packard Enterprise HPE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-23592, published 2026-01-27. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an…
• CVE-2026-23593, published 2026-01-27. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could…