fabric composer vulnerabilities and fixes

Recent CVEs affecting fabric composer, with upgrade or downgrade steps. 52 tracked.

Also searched as: fabriccomposer.

fabric composer has 52 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 52. Most recent: 2026-09-01. Highest priority: CVE-2026-76657 (score 54/100).

• CVE-2026-19766 CRITICAL 9.6 UPGRADE An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Comp
• CVE-2026-73712 HIGH 8.1 UPGRADE A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to
• CVE-2026-73728 MEDIUM 6.5 UPGRADE Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authe
• CVE-2026-73729 MEDIUM 6.5 UPGRADE A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authentica
• CVE-2026-73730 MEDIUM 6.5 UPGRADE A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer
• CVE-2026-73742 MEDIUM 4.3 UPGRADE A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privileg
• CVE-2026-73731 MEDIUM 6.1 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
• CVE-2026-73743 LOW 3.7 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
• CVE-2026-73741 MEDIUM 4.3 UPGRADE A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operat
• CVE-2026-73739 MEDIUM 4.4 UPGRADE A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administr
• CVE-2026-73740 MEDIUM 4.4 UPGRADE A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated priv
• CVE-2026-73738 MEDIUM 4.7 UPGRADE A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authentica
• CVE-2026-73737 MEDIUM 4.8 UPGRADE An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer
• CVE-2026-73735 MEDIUM 5.4 UPGRADE Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operat
• CVE-2026-73736 MEDIUM 5.3 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
• CVE-2026-73734 MEDIUM 5.4 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
• CVE-2026-73733 MEDIUM 5.4 UPGRADE Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privileg
• CVE-2026-73732 MEDIUM 5.6 UPGRADE A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authentica
• CVE-2026-73717 HIGH 7.5 UPGRADE A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Compos
• CVE-2026-73716 HIGH 7.5 UPGRADE A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Compo
• CVE-2026-73700 CRITICAL 9.0 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authent
• CVE-2026-73701 CRITICAL 9.0 UPGRADE An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networ
• CVE-2026-73710 HIGH 8.2 UPGRADE Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote att
• CVE-2026-73745 LOW 3.1 UPGRADE A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote at
• CVE-2026-73727 MEDIUM 6.5 UPGRADE Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operat
• CVE-2026-73726 MEDIUM 6.8 UPGRADE A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that
• CVE-2026-73725 HIGH 7.0 UPGRADE A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer
• CVE-2026-73724 HIGH 7.1 UPGRADE Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer
• CVE-2026-73723 HIGH 7.1 UPGRADE A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Com
• CVE-2026-73722 HIGH 7.2 UPGRADE Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer coul
• CVE-2026-73721 HIGH 7.2 UPGRADE Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to c
• CVE-2026-73720 HIGH 7.2 UPGRADE Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote atta
• CVE-2026-73719 HIGH 7.2 UPGRADE An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an a
• CVE-2026-73718 HIGH 7.4 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
• CVE-2026-73708 HIGH 8.3 UPGRADE A business logic vulnerability exists in the API of HPE Networking Fabric Composer
• CVE-2026-73707 HIGH 8.5 UPGRADE Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer
• CVE-2026-73706 HIGH 8.6 UPGRADE A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to
• CVE-2026-73705 HIGH 8.8 UPGRADE An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticate
• CVE-2026-73704 HIGH 8.8 UPGRADE A command sanitization bypass exists in the API of HPE Networking Fabric Composer
• CVE-2026-73703 HIGH 8.8 UPGRADE A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthe
• CVE-2026-73702 HIGH 8.8 UPGRADE A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer
• CVE-2026-73711 HIGH 8.1 UPGRADE A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer
• CVE-2026-73713 HIGH 7.8 UPGRADE Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer
• CVE-2026-73714 HIGH 7.6 UPGRADE A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer
• CVE-2026-73715 HIGH 7.5 UPGRADE A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to
• CVE-2026-73709 HIGH 8.3 UPGRADE A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenti
• CVE-2026-73744 LOW 3.5 UPGRADE A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Compos
• CVE-2026-73746 LOW 3.1 UPGRADE A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an auth
• CVE-2026-73747 LOW 2.5 UPGRADE A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer
• CVE-2026-76657 CRITICAL 10.0 UPGRADE Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow
• CVE-2026-73748 LOW 2.2 UPGRADE A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administra
• CVE-2026-76658 CRITICAL 10.0 UPGRADE A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an un

FAQ

How do I fix fabric composer vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is fabric composer being exploited right now?

None of the tracked fabric composer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which fabric composer CVE should I patch first?

CVE-2026-76657 currently ranks highest (54/100): Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow.

RSS feed for fabric composer · ← Back to latest CVEs