What’s Vulnerable › Vulnerabilities

CVE-2026-23592: Insecure File Handling allows Remote Code Execution in Backup Functionality

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-27 · updated 2026-06-17
• Weakness: CWE-78

Description

Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected products

• Hewlett Packard Enterprise (HPE) HPE Aruba Networking Fabric Composer: from 7.0.0 through 7.2.3

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04996en_us&docLocale=en_US

Get alerted when CVE-2026-23592 or the next vulnerability affects your stack