HPE Aruba Networking Fabric Composer vulnerabilities

2 known vulnerabilities in HPE Aruba Networking Fabric Composer from Hewlett Packard Enterprise. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  HPE Aruba Networking Fabric Composer: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-23593Jan 27, 2026Hewlett Packard Enterprise

  A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.

• 7.2 High severity

  HPE Aruba Networking Fabric Composer: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-23592Jan 27, 2026Hewlett Packard Enterprise

  Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying oper