What is the CVSS score of CVE-2026-23593?

CVE-2026-23593 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2026-23593?

Within 24 hours: Inventory all HPE Aruba Fabric Composer deployments and restrict network access to management interfaces to trusted administrative networks only. Within 7 days: Deploy WAF rules to block path traversal patterns (../, ..\) targeting the management interface and implement enhanced logging on all management access. Within 30 days: Contact HPE for patch availability timeline, evaluate network segmentation to isolate management traffic, and consider temporary disable of remote management access if operationally feasible.

CVE-2026-23593

HIGH

Path Traversal (CWE-22)

2026-01-27 security-alert@hpe.com

Path Traversal

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Jan 27, 2026 - 18:15 nvd

HIGH 7.5

DescriptionCVE.org

A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.

AnalysisAI

web-based management interface of HPE Aruba Networking Fabric Composer is affected by path traversal (CVSS 7.5).

Technical ContextAI

This vulnerability (CWE-22: Path Traversal) exists in the web-based management component. in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.

Affected ProductsAI

Product: web-based management interface of HPE Aruba Networking Fabric Composer. Component: web-based management.

RemediationAI

Monitor vendor advisories for a patch. Validate and sanitize file path inputs. Use allowlists. Restrict network access to the affected service where possible.