# Arubanetworks Fabric Composer vulnerabilities

Source: https://junglewise.ai/threats/technologies/fabric-composer  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/fabric-composer.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 51 vulnerabilities in Arubanetworks Fabric Composer: 0 in the last 7 days and 51 in the last 90 days, 5 of them critical and 0 exploited in the wild. The most recent, CVE-2026-76658, was published on 1 September 2026. Nothing was published in the last eight weeks.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 51
- All time: 51 (5 critical, 0 exploited in the wild)

## Latest Arubanetworks Fabric Composer vulnerabilities

- [CVE-2026-76658: HPE Networking Fabric Composer SSH daemon auth bypass](https://junglewise.ai/threats/cve-2026-76658-hpe-networking-fabric-composer-ssh-daemon-auth-bypass) (critical, CVSS 10, published 1 Sep 2026)
- [CVE-2026-76657: HPE Networking Fabric Composer API authentication bypass](https://junglewise.ai/threats/cve-2026-76657-hpe-networking-fabric-composer-api-authentication-bypass) (critical, CVSS 10, published 1 Sep 2026)
- [CVE-2026-73748: HPE Networking Fabric Composer information disclosure in management interface](https://junglewise.ai/threats/cve-2026-73748-hpe-networking-fabric-composer-information-disclosure-in) (low, CVSS 2.2, published 1 Sep 2026)
- [CVE-2026-73747: HPE Networking Fabric Composer privilege escalation](https://junglewise.ai/threats/cve-2026-73747-hpe-networking-fabric-composer-privilege-escalation) (low, CVSS 2.5, published 1 Sep 2026)
- [CVE-2026-73746: HPE Networking Fabric Composer API denial of service](https://junglewise.ai/threats/cve-2026-73746-hpe-networking-fabric-composer-api-denial-of-service) (low, CVSS 3.1, published 1 Sep 2026)
- [CVE-2026-73745: HPE Networking Fabric Composer API information disclosure](https://junglewise.ai/threats/cve-2026-73745-hpe-networking-fabric-composer-api-information-disclosure) (low, CVSS 3.1, published 1 Sep 2026)
- [CVE-2026-73744: HPE Networking Fabric Composer denial of service in management interface](https://junglewise.ai/threats/cve-2026-73744-hpe-networking-fabric-composer-denial-of-service-in-management) (low, CVSS 3.5, published 1 Sep 2026)
- [CVE-2026-73743: HPE Networking Fabric Composer information disclosure in web interface](https://junglewise.ai/threats/cve-2026-73743-hpe-networking-fabric-composer-information-disclosure-in-web) (low, CVSS 3.7, published 1 Sep 2026)
- [CVE-2026-73742: HPE Networking Fabric Composer API spoofing in request attribution](https://junglewise.ai/threats/cve-2026-73742-hpe-networking-fabric-composer-api-spoofing-in-request) (medium, CVSS 4.3, published 1 Sep 2026)
- [CVE-2026-73741: HPE Networking Fabric Composer API privilege escalation](https://junglewise.ai/threats/cve-2026-73741-hpe-networking-fabric-composer-api-privilege-escalation) (medium, CVSS 4.3, published 1 Sep 2026)
- [CVE-2026-73740: HPE Networking Fabric Composer privilege escalation](https://junglewise.ai/threats/cve-2026-73740-hpe-networking-fabric-composer-privilege-escalation) (medium, CVSS 4.4, published 1 Sep 2026)
- [CVE-2026-73739: HPE Networking Fabric Composer cleartext sensitive information disclosure in API](https://junglewise.ai/threats/cve-2026-73739-hpe-networking-fabric-composer-cleartext-sensitive-information) (medium, CVSS 4.4, published 1 Sep 2026)
- [CVE-2026-73738: HPE Networking Fabric Composer information disclosure in underlying OS](https://junglewise.ai/threats/cve-2026-73738-hpe-networking-fabric-composer-information-disclosure-in) (medium, CVSS 4.7, published 1 Sep 2026)
- [CVE-2026-73737: HPE Networking Fabric Composer unauthenticated path traversal in API](https://junglewise.ai/threats/cve-2026-73737-hpe-networking-fabric-composer-unauthenticated-path-traversal-in) (medium, CVSS 4.8, published 1 Sep 2026)
- [CVE-2026-73736: HPE Networking Fabric Composer path traversal in web interface](https://junglewise.ai/threats/cve-2026-73736-hpe-networking-fabric-composer-path-traversal-in-web-interface) (medium, CVSS 5.3, published 1 Sep 2026)
- [CVE-2026-73735: HPE Networking Fabric Composer privilege escalation in API](https://junglewise.ai/threats/cve-2026-73735-hpe-networking-fabric-composer-privilege-escalation-in-api) (medium, CVSS 5.4, published 1 Sep 2026)
- [CVE-2026-73734: HPE Networking Fabric Composer open redirect in management interface](https://junglewise.ai/threats/cve-2026-73734-hpe-networking-fabric-composer-open-redirect-in-management) (medium, CVSS 5.4, published 1 Sep 2026)
- [CVE-2026-73733: HPE Networking Fabric Composer API authentication bypass](https://junglewise.ai/threats/cve-2026-73733-hpe-networking-fabric-composer-api-authentication-bypass) (medium, CVSS 5.4, published 1 Sep 2026)
- [CVE-2026-73732: HPE Networking Fabric Composer privilege escalation via OS vulnerability](https://junglewise.ai/threats/cve-2026-73732-hpe-networking-fabric-composer-privilege-escalation-via-os) (medium, CVSS 5.6, published 1 Sep 2026)
- [CVE-2026-73731: HPE Networking Fabric Composer reflected XSS in web management interface](https://junglewise.ai/threats/cve-2026-73731-hpe-networking-fabric-composer-reflected-xss-in-web-management) (medium, CVSS 6.1, published 1 Sep 2026)
- [CVE-2026-73730: HPE Networking Fabric Composer API privilege escalation](https://junglewise.ai/threats/cve-2026-73730-hpe-networking-fabric-composer-api-privilege-escalation) (medium, CVSS 6.5, published 1 Sep 2026)
- [CVE-2026-73729: HPE Networking Fabric Composer privilege escalation in underlying OS](https://junglewise.ai/threats/cve-2026-73729-hpe-networking-fabric-composer-privilege-escalation-in-underlying) (medium, CVSS 6.5, published 1 Sep 2026)
- [CVE-2026-73728: HPE Networking Fabric Composer API denial of service](https://junglewise.ai/threats/cve-2026-73728-hpe-networking-fabric-composer-api-denial-of-service) (medium, CVSS 6.5, published 1 Sep 2026)
- [CVE-2026-73727: HPE Networking Fabric Composer API privilege escalation](https://junglewise.ai/threats/cve-2026-73727-hpe-networking-fabric-composer-api-privilege-escalation) (medium, CVSS 6.5, published 1 Sep 2026)
- [CVE-2026-73726: HPE Networking Fabric Composer authentication bypass in operating system](https://junglewise.ai/threats/cve-2026-73726-hpe-networking-fabric-composer-authentication-bypass-in-operating) (medium, CVSS 6.8, published 1 Sep 2026)

## Most severe Arubanetworks Fabric Composer vulnerabilities

- [CVE-2026-76658: HPE Networking Fabric Composer SSH daemon auth bypass](https://junglewise.ai/threats/cve-2026-76658-hpe-networking-fabric-composer-ssh-daemon-auth-bypass) (critical, CVSS 10, published 1 Sep 2026)
- [CVE-2026-76657: HPE Networking Fabric Composer API authentication bypass](https://junglewise.ai/threats/cve-2026-76657-hpe-networking-fabric-composer-api-authentication-bypass) (critical, CVSS 10, published 1 Sep 2026)
- [CVE-2026-19766: HPE Networking Fabric Composer authentication bypass in OS](https://junglewise.ai/threats/cve-2026-19766-hpe-networking-fabric-composer-authentication-bypass-in-os) (critical, CVSS 9.6, published 1 Sep 2026)
- [CVE-2026-73701: HPE Networking Fabric Composer unauthenticated remote code execution](https://junglewise.ai/threats/cve-2026-73701-hpe-networking-fabric-composer-unauthenticated-remote-code) (critical, CVSS 9, published 1 Sep 2026)
- [CVE-2026-73700: HPE Networking Fabric Composer stored cross-site scripting in management interface](https://junglewise.ai/threats/cve-2026-73700-hpe-networking-fabric-composer-stored-cross-site-scripting-in) (critical, CVSS 9, published 1 Sep 2026)
- [CVE-2026-73705: HPE Networking Fabric Composer arbitrary file write in API](https://junglewise.ai/threats/cve-2026-73705-hpe-networking-fabric-composer-arbitrary-file-write-in-api) (high, CVSS 8.8, published 1 Sep 2026)
- [CVE-2026-73704: HPE Networking Fabric Composer command sanitization bypass in API](https://junglewise.ai/threats/cve-2026-73704-hpe-networking-fabric-composer-command-sanitization-bypass-in-api) (high, CVSS 8.8, published 1 Sep 2026)
- [CVE-2026-73702: HPE Networking Fabric Composer privilege escalation in API](https://junglewise.ai/threats/cve-2026-73702-hpe-networking-fabric-composer-privilege-escalation-in-api) (high, CVSS 8.8, published 1 Sep 2026)
- [CVE-2026-73703: HPE Networking Fabric Composer stored XSS in web management interface](https://junglewise.ai/threats/cve-2026-73703-hpe-networking-fabric-composer-stored-xss-in-web-management) (high, CVSS 8.8, published 1 Sep 2026)
- [CVE-2026-73707: HPE Networking Fabric Composer privilege escalation in API](https://junglewise.ai/threats/cve-2026-73707-hpe-networking-fabric-composer-privilege-escalation-in-api) (high, CVSS 8.5, published 1 Sep 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 51 | 5 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Arubanetworks Fabric Composer vulnerabilities", https://junglewise.ai/threats/technologies/fabric-composer, 9 November 2026.