# HPE Aruba Patches Fabric Composer, VIA Flaws

Published: 2026-11-04 · Severity: routine · Sectors: Technology, Telecommunications
Canonical: https://vorant.io/reports/f61cd5d5-6ac4-59cf-a323-f78c56998e43/hpe-aruba-patches-fabric-composer-via-flaws
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> HPE Aruba Networking fixed dozens of vulnerabilities in Fabric Composer and Virtual Intranet Access that enable remote code execution, privilege escalation and denial of service.

Source: cert.cyber.gouv.fr — https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1451

## What to check

- Applies to: The 40 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: No exploitation in the wild and no public exploit is recorded for the CVEs named.

CERT-FR has relayed two HPE Aruba Networking security bulletins (HPESBNW05172 and HPESBNW05173, published 3 November 2026) covering a large batch of vulnerabilities affecting Fabric Composer (versions 7.4.x prior to 7.4.1, and versions prior to 7.3.5) and Virtual Intranet Access (VIA) versions prior to 4.7.9. The advisory lists over 50 CVEs collectively allowing attackers to achieve remote code execution, privilege escalation, remote denial of service, SQL injection, security policy bypass, and compromise of data confidentiality and integrity.

No evidence of in-the-wild exploitation is mentioned in the advisory. CERT-FR's guidance is to apply the vendor's patches as referenced in the official HPE Aruba security bulletins. Given the volume and severity range of issues (including RCE and privilege escalation) affecting network management and remote access infrastructure, organizations running the affected Fabric Composer or VIA versions should prioritize patching promptly, particularly where these components are internet-facing or manage critical network fabric.

Defenders should inventory deployments of HPE Aruba Fabric Composer and VIA, confirm software versions against the fixed releases (Fabric Composer 7.4.1+/7.3.5+, VIA 4.7.9+), and apply vendor patches without delay. Monitoring for anomalous administrative activity, unexpected privilege changes, or unusual SQL query patterns on affected management systems is advised pending patch deployment.

## Mentioned in this report

- Vulnerabilities: CVE-2026-95722, CVE-2026-95723, CVE-2026-95724, CVE-2026-95725, CVE-2026-95726, CVE-2026-95727, CVE-2026-95728, CVE-2026-95729, CVE-2026-95730, CVE-2026-95731, CVE-2026-95732, CVE-2026-95733, CVE-2026-95734, CVE-2026-95735, CVE-2026-95736, CVE-2026-95737, CVE-2026-95738, CVE-2026-95739, CVE-2026-95740, CVE-2026-95741, CVE-2026-95742, CVE-2026-95743, CVE-2026-95744, CVE-2026-95745, CVE-2026-95746, CVE-2026-95747, CVE-2026-95748, CVE-2026-95749, CVE-2026-95750, CVE-2026-95751, CVE-2026-95752, CVE-2026-95753, CVE-2026-95755, CVE-2026-95756, CVE-2026-95757, CVE-2026-95758, CVE-2026-95759, CVE-2026-95760, CVE-2026-95761, CVE-2026-95762

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1451

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/f61cd5d5-6ac4-59cf-a323-f78c56998e43/hpe-aruba-patches-fabric-composer-via-flaws.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup