CVE-2026-76658

critical · 10

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.

CVSS

0.7%

EPSS (exploit prob.)

55th

EPSS percentile

2026-09-01

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-287

Affected products

Vendor	Product	Affected versions
arubanetworks	fabric_composer	<= 7.3.3

Check a specific version with /api/v1/cve/match.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-76658