{"vulnerability": "cve-2026-7665", "sightings": [{"uuid": "b5d685e4-6c76-430f-ad34-33ec5b1bb52c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7665", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlv6kfnev25", "content": "CVE-2026-7665 - Essential Addons for Elementor\nCVE ID : CVE-2026-7665\n \n Published : June 6, 2026, 4:17 a.m. | 15\u00a0minutes ago\n \n Description : The Essential Addons for Elementor \u2013 Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Information Expos...", "creation_timestamp": "2026-06-06T05:09:44.223068Z"}, {"uuid": "2900a027-a429-474c-8b97-51e90d9dfca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7665", "type": "published-proof-of-concept", "source": "Telegram/bfOUhtYO5_knJKoj_if_OKxt7hZq78r0zHfwCUUuIAza2Gk", "content": "", "creation_timestamp": "2026-06-11T11:00:12.000000Z"}, {"uuid": "441405f9-7b25-4177-b751-2b4b61c896ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76658", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117197946004426109", "content": "Vuln or bugdoor?\nhttps://nvd.nist.gov/vuln/detail/cve-2026-76658\n\nA vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system leading to complete system compromise.", "creation_timestamp": "2026-09-01T21:38:57.619921Z"}, {"uuid": "9ea31a83-28de-4673-8a76-f124ca18b474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76657", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muigmax72z22", "content": "\ud83d\udea8 CVE-2026-76657 \u2014 CVSS 10 CRITICAL\n\nVulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially al...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76657\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T22:07:20.082784Z"}, {"uuid": "a2a45457-b3d0-47a7-85ea-2335cac1b8c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76658", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muigmld47g2v", "content": "\ud83d\udea8 CVE-2026-76658 \u2014 CVSS 10 CRITICAL\n\nA vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76658\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T22:07:30.834825Z"}, {"uuid": "e2ee7c7f-56b5-4a50-9165-4601a2e73008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76657", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muikoegdsa2m", "content": "CVE-2026-76657 - fabric composer\nThe web interface that manages HPE Networking Fabric Composer can be tricked into granting full control without a valid login. An attacker could then take over the management\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fabriccomposer #CVE #infosec", "creation_timestamp": "2026-09-01T23:20:05.560627Z"}, {"uuid": "8dab691b-c3d4-43ae-9c63-5a4eb5b72096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76658", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muila7kv7w2o", "content": "CVE-2026-76658 - fabric composer\nThe SSH service in HPE Networking Fabric Composer can be accessed without a password, allowing an outside attacker to log in as an administrator. Once inside, the attacker can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fabriccomposer #CVE #infosec", "creation_timestamp": "2026-09-01T23:30:04.871844Z"}, {"uuid": "32beed57-08e8-41cb-a3ef-d62ecbb59fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76657", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muimbo7zsr2l", "content": "Critical HPE Fabric Composer vulnerabilities, including CVE-2026-76657, allow remote code execution. Update to version 7.4.0 now to secure your network.\n\n#HPE #FabricComposer #Vulnerability #Cybersecurity #CVE202676657", "creation_timestamp": "2026-09-01T23:48:47.809597Z"}, {"uuid": "64f20e75-9dcd-47fe-bc7a-bfb29e100fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76658", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mukrrba44k2q", "content": "CVE-2026-76658: Critical HPE Fabric Composer Flaw Enables Unauthenticated Remote Code Execution\n\n", "creation_timestamp": "2026-09-02T20:32:19.590396Z"}, {"uuid": "8758d129-42a4-4053-bccc-a1ccd075d17a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76658", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mulg5lgrin23", "content": "\ud83d\udccc CVE-2026-76658 - A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain ad... https://www.cyberhub.blog/cves/CVE-2026-76658", "creation_timestamp": "2026-09-03T02:37:07.991661Z"}, {"uuid": "e0a0dc28-4abe-4182-8715-88fffdbc899b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76657", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mulht7wvmh2f", "content": "\ud83d\udccc CVE-2026-76657 - Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to c... https://www.cyberhub.blog/cves/CVE-2026-76657", "creation_timestamp": "2026-09-03T03:07:07.462320Z"}, {"uuid": "44ded50f-0815-4cc5-8ad9-dc8481d9075d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76658", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0339", "content": "HPE heeft meerdere kwetsbaarheden verholpen in HPE Networking Fabric Composer. De kwetsbaarheden in HPE Networking Fabric Composer betreffen onder andere authenticatiebypasses, privilege-escalaties, remote code execution, command injection, cross-site scripting (XSS), denial-of-service, arbitrary file write, path traversal, en onbevoegde toegang tot gevoelige informatie. Sommige kwetsbaarheden kunnen door ongeauthenticeerde aanvallers op afstand worden misbruikt, terwijl andere exploitatie vereisen door geauthenticeerde gebruikers met beperkte privileges. Exploitatie kan leiden tot het verkrijgen van administratieve toegang, het uitvoeren van willekeurige commando's met verhoogde privileges, het wijzigen van systeemconfiguraties, het uitlekken van gevoelige data, en het verstoren van de normale werking van het systeem. Diverse kwetsbaarheden zijn aanwezig in de API, het onderliggende besturingssysteem en de webgebaseerde managementinterface van het product. Sommige aanvallen vereisen dat de aanvaller zich op een aangrenzend netwerk bevindt of lokale toegang heeft. De kwetsbaarheden be\u00efnvloeden de integriteit, vertrouwelijkheid en beschikbaarheid van het systeem en de netwerkfabric-omgeving die door HPE Networking Fabric Composer wordt beheerd.\n\nAls de SSH beheerinterface publiekelijk via het internet bereikbaar is, kan CVE-2026-76658 door ongeauthoriseerde aanvallers van buitenaf worden misbruikt voor volledige overname van het achterliggende datacenter-netwerk. Het is goed gebruik een dergelijk beheerinterface niet direct aan het internet te ontsluiten of af te schermen middels een VPN of whitelist.", "creation_timestamp": "2026-09-03T16:00:54.657572Z"}, {"uuid": "a9eb9ce4-5816-4d8e-b857-24cd2944d64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76658", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0339", "content": "HPE heeft meerdere kwetsbaarheden verholpen in HPE Networking Fabric Composer. De kwetsbaarheden in HPE Networking Fabric Composer betreffen onder andere authenticatiebypasses, privilege-escalaties, remote code execution, command injection, cross-site scripting (XSS), denial-of-service, arbitrary file write, path traversal, en onbevoegde toegang tot gevoelige informatie. Sommige kwetsbaarheden kunnen door ongeauthenticeerde aanvallers op afstand worden misbruikt, terwijl andere exploitatie vereisen door geauthenticeerde gebruikers met beperkte privileges. Exploitatie kan leiden tot het verkrijgen van administratieve toegang, het uitvoeren van willekeurige commando's met verhoogde privileges, het wijzigen van systeemconfiguraties, het uitlekken van gevoelige data, en het verstoren van de normale werking van het systeem. Diverse kwetsbaarheden zijn aanwezig in de API, het onderliggende besturingssysteem en de webgebaseerde managementinterface van het product. Sommige aanvallen vereisen dat de aanvaller zich op een aangrenzend netwerk bevindt of lokale toegang heeft. De kwetsbaarheden be\u00efnvloeden de integriteit, vertrouwelijkheid en beschikbaarheid van het systeem en de netwerkfabric-omgeving die door HPE Networking Fabric Composer wordt beheerd.\n\nAls de SSH beheerinterface publiekelijk via het internet bereikbaar is, kan CVE-2026-76658 door ongeauthoriseerde aanvallers van buitenaf worden misbruikt voor volledige overname van het achterliggende datacenter-netwerk. Het is goed gebruik een dergelijk beheerinterface niet direct aan het internet te ontsluiten of af te schermen middels een VPN of whitelist.", "creation_timestamp": "2026-09-04T01:00:35.855924Z"}]}