Skip to content
OpenAdvisories
High · 7.5 CVE-2026-23593 EUVD-2026-4780GHSA-8fmp-6g38-h9j8

Unauthenticated Limited File Read allows Data Exposure in Web Interface

Published Jan 27, 2026 · Updated Feb 27, 2026 · Assigned by hpe

Description

A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Fabric Composer 7.0.0 – ≤ 7.2.3 —

References