{"id":"CVE-2026-73747","aliases":["EUVD-2026-69473","GHSA-j46j-g6q9-q865"],"status":"published","title":"Local Privilege Escalation Vulnerability in HPE Networking Fabric Composer","description":"A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system.","severity":{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00101,"percentile":0.00902,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2026-09-01T19:47:50Z","modified":"2026-09-02T15:14:22Z","products":[{"vendor":"arubanetworks","product":"fabric_composer"},{"vendor":"hewlett packard enterprise (hpe)","product":"fabric composer"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us\u0026docLocale=en_US","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73747"},{"url":"https://github.com/advisories/GHSA-j46j-g6q9-q865"}],"sources":{"cve":[{"id":"CVE-2026-73747","title":"Local Privilege Escalation Vulnerability in HPE Networking Fabric Composer","description":"A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system.","status":"published","published":"2026-09-01T19:47:50.096Z","modified":"2026-09-01T20:24:54.973Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T13:43:33.766176Z"}],"euvd":[{"id":"EUVD-2026-69473","description":"A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system.","status":"published","published":"2026-09-01T19:47:50Z","modified":"2026-09-01T20:24:54Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T18:01:16.851436Z"}],"ghsa":[{"id":"GHSA-j46j-g6q9-q865","title":"A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer....","description":"A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system.","status":"published","published":"2026-09-01T21:31:50Z","modified":"2026-09-01T21:31:59Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:11:15.292173Z"}],"nvd":[{"id":"CVE-2026-73747","description":"A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system.","status":"published","published":"2026-09-01T20:17:22.44Z","modified":"2026-09-02T15:14:22.81Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:12:43.04945Z"}]}}