Critical severity9.6NVD Advisory· Published Sep 1, 2026· Updated Sep 4, 2026
CVE-2026-19766
CVE-2026-19766
Description
An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code as a privileged user on the underlying operating system, leading to complete compromise of the AFC host.
Affected products
1Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
1- Critical HPE Fabric Composer Flaws Let Unauthenticated Attackers Execute Code and Take Over SystemsCyber Security News · Sep 2, 2026