Critical severity10.0NVD Advisory· Published Sep 1, 2026· Updated Sep 2, 2026
CVE-2026-76658
CVE-2026-76658
Description
A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.
Affected products
1Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
2- Critical HPE Fabric Composer Flaws Let Unauthenticated Attackers Execute Code and Take Over SystemsCyber Security News · Sep 2, 2026
- HPE Networking Fabric Composer: 25 Vulnerabilities Including Two Critical Flaws Disclosed TogetherVypr Intelligence · Sep 1, 2026