Loading market data...
← Back to CVE feed

CVE-2026-73700

CRITICAL CVSS 9.0 View on NVD ↗

Description

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected Products

arubanetworks/fabric_composer
Published: Sep 01, 2026 20:17 UTC Modified: Sep 02, 2026 16:26 UTC