{"id":"CVE-2026-23592","aliases":["EUVD-2026-4779","GHSA-mwfw-2px5-7mxx"],"status":"published","title":"Insecure File Handling allows Remote Code Execution in Backup Functionality","description":"Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00862,"percentile":0.58865,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2026-01-27T17:57:57Z","modified":"2026-06-17T10:21:48Z","products":[{"vendor":"hewlett packard enterprise (hpe)","product":"hpe aruba networking fabric composer"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04996en_us\u0026docLocale=en_US"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23592"},{"url":"https://github.com/advisories/GHSA-mwfw-2px5-7mxx"}],"sources":{"cve":[{"id":"CVE-2026-23592","title":"Insecure File Handling allows Remote Code Execution in Backup Functionality","description":"Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.","status":"published","published":"2026-01-27T17:57:57.364Z","modified":"2026-02-27T14:33:27.535Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T13:42:15.603999Z"}],"euvd":[{"id":"EUVD-2026-4779","description":"Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.","status":"published","published":"2026-01-27T17:57:57Z","modified":"2026-02-27T14:33:27Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:14.049749Z"}],"ghsa":[{"id":"GHSA-mwfw-2px5-7mxx","title":"Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could...","description":"Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.","status":"published","published":"2026-01-27T18:32:17Z","modified":"2026-02-27T15:34:10Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:06:24.663603Z"}],"nvd":[{"id":"CVE-2026-23592","description":"Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.","status":"published","published":"2026-01-27T18:15:56.383Z","modified":"2026-06-17T10:21:48.08Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:12:04.769088Z"}]}}