VULNERABILITY INTELLIGENCE
CVE-2026-76658
CVSS score10 CRITICAL
EPSS probability0.75%
CISA KEVNot currently listed
Published2026-09-01
Last modified2026-09-02
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-287
Primary references
- security-alert@hpe.com — Vendor Advisory