CVE-2026-76658: Critical HPE Fabric Composer Flaw Enables Unauthenticated Remote Code Execution

**Executive summary:** CVE-2026-76658 is a critical unauthenticated remote code execution vulnerability in the SSH daemon of HPE Fabric Composer (CVSS 10.0) that can give an attacker administrative access and arbitrary privileged command execution on the management host; HPE advises upgrading affected systems (<=7.3.3) to Fabric Composer 7.3.4 or 7.4.0+, isolating management interfaces, enforcing firewall controls, and monitoring for suspicious SSH/admin activity — no public exploit or active exploitation was reported at disclosure.