PT-2026-4991 · Hewlett Packard · Hpe Aruba Networking Fabric Composer

Daniel Jensen · Published 2026-01-27 · Updated 2026-02-27 · CVE-2026-23592

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking Fabric Composer (affected versions not specified)

Description An issue exists in HPE Aruba Networking Fabric Composer’s backup functionality that could allow authenticated attackers to execute code remotely. Successful exploitation may allow an attacker to execute arbitrary commands on the underlying operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-23592

Affected Products

Hpe Aruba Networking Fabric Composer

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-23592 · Security Note
• https://twitter.com/CVEnew/status/2016217612091588698 · Twitter Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04996en_us&docLocale=en_US · Note
• https://t.me/cveNotify/153508 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2016274176319840340 · Twitter Post