CVE-2026-73740
A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying
CVSS
4.4
Medio
EPSS
0.1%
p3
KEV
—
Exploit Today
1
0-100
Publicado: 1 sept 2026 · Última mod.: 3 sept 2026 · CWE-269
0.1%EPSS · 30 días0.1%
2026-09-282026-10-26
A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user privileges to those of a higher role. A successful exploit allows the attacker to change the state of certain settings of the affected system.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-771725.3 MED—
———App passwords were allowed to bypass password confirmation on sensitive endpoints.5hCVE-2026-1115847.3 ALT—
———A race condition in the installation
process of TeamViewer Remote Management - Patch Management for Windows prior to
version 26.9.1 allows a local authenticated attacker with low privileges to
execute arbitrary code with elevated privileges by replacing the service
executable in an insufficiently protected temporary directory during Patch
Management activation.6hCVE-2026-1115837.3 ALT—
———Improper access control in the installer
staging directory used by TeamViewer Full Client and Host prior to version
15.82 for Windows during installation of Advanced Asset Management allows a
local authenticated user with low privileges to execute arbitrary commands as
SYSTEM. An attacker can place a crafted installer options file that is
processed by the Advanced Asset Management installer during service activation.6hCVE-2026-1115827.3 ALT—
———A DLL loading vulnerability in the
TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute arbitrary
code with elevated privileges. Exploitation requires user interaction.6hCVE-2026-1180088.8 ALT—
———Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159.7hCVE-2026-907296.7 MED—
———Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.7h