HPE Aruba Networking Fabric Composer Affected by 52 Vulnerabilities Including Five Critical Flaws
HPE disclosed a security advisory on September 1, 2026, revealing 52 vulnerabilities in HPE Aruba Networking Fabric Composer. Five of these issues are rated Critical, including authentication bypass flaws that allow remote code execution and privilege escalation. CVE-2026-76657 permits attackers to bypass API authentication and gain administrator rights remotely. CVE-2026-76658 enables unauthenticated command execution as a privileged user via the SSH daemon. Additional critical issues include CVE-2026-19766 for adjacent network host takeover, CVE-2026-73700 for XSS in the web interface, and CVE-2026-73701 for unauthenticated remote code execution under certain conditions. HPE strongly recommends immediate updates across affected components including the OS, SSH, web management, and API layers.
Security NEXTSep 2, 2026Translated from Japanese