<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 30 Sep 2026 15:57:51 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-73704 — Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-73704</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Hewlett Packard Enterprise (HPE) Fabric Composer&lt;/p&gt;
&lt;p&gt;A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Hewlett Packard Enterprise (HPE) Fabric Composer&lt;/p&gt;
&lt;p&gt;A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to escalate their permissions to those of an administrative user, leading to complete compromise of the affected system.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-73704</guid>
    </item>
  </channel>
</rss>
