PT-2026-4991 · Hewlett Packard · Hpe Aruba Networking Fabric Composer

Daniel Jensen · Publicado 2026-01-27 · Atualizado 2026-02-27 · CVE-2026-23592

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking Fabric Composer (affected versions not specified)

Description An issue exists in HPE Aruba Networking Fabric Composer’s backup functionality that could allow authenticated attackers to execute code remotely. Successful exploitation may allow an attacker to execute arbitrary commands on the underlying operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-23592

Produtos afetados

Hpe Aruba Networking Fabric Composer

Referências · 5

• https://twitter.com/CVEnew/status/2016217612091588698 · Publicação no Twitter
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04996en_us&docLocale=en_US · Nota
• https://t.me/cveNotify/153508 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2016274176319840340 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-23592 · Nota de Segurança