Executive brief
HPE Networking Fabric Composer is a network management tool used to configure and monitor fabric infrastructure. A local privilege escalation vulnerability allows an already-authenticated user with elevated privileges to further expand their access and modify critical system settings, potentially disrupting network operations or exposing configuration data.
Technical details
This is a local privilege escalation vulnerability in HPE Networking Fabric Composer that allows an authenticated user with privileged access on the underlying host to escalate to a higher role with additional capabilities. The attack requires prior authentication and local system access, and successful exploitation enables an attacker to alter the state of system settings. The vulnerability has been documented in CVE-2026-73740 with a CVSS score of 4.4 (medium severity). HPE has released guidance and patches; users should consult HPE support documentation for remediation steps specific to their deployment.
Affected products
- HPE Networking Fabric Composer
Timeline
- 2026-09-01: disclosed