Hewlett Packard Enterprise (HPE) HPE Aruba Networking Fabric Composer vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hewlett Packard Enterprise (HPE) HPE Aruba Networking Fabric Composer: 2 record(s), with affected versions and fixes.
CVE-2026-23593
High · 7.5
CWE-22 Jan 27, 2026
Unauthenticated Limited File Read allows Data Exposure in Web Interface
A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.
CVE-2026-23592
High · 7.2
CWE-78 Jan 27, 2026
Insecure File Handling allows Remote Code Execution in Backup Functionality
Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.