Skip to content
OpenAdvisories
High · 7.2 CVE-2026-23592 EUVD-2026-4779GHSA-mwfw-2px5-7mxx

Insecure File Handling allows Remote Code Execution in Backup Functionality

Published Jan 27, 2026 · Updated Feb 27, 2026 · Assigned by hpe

Description

Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Fabric Composer 7.0.0 – ≤ 7.2.3 —

References