CRITICAL 9.0 NVD

CVE-2026-73700

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a st

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

References

Published: 2026-09-01 · Source: NVD · Feed updated: 2026-09-01
This critical severity vulnerability with a CVSS score of 9.0 was published on 2026-09-01 via NVD.

Risk Timeline

CVE Disclosed2026-09-01 · -1 days ago

Remediation Resources

Analysis & PoC
support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLoc
vulnfeed aggregates 11581 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.