CVE-2026-73727
Awaiting Analysis Awaiting Analysis - Queue

Authenticated Information Disclosure in HPE Networking Fabric Composer API

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description
Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A successful exploit allows an attacker to access data beyond what is authorized by the user's existing privilege level, which could be used to potentially gain further access to network services supported by HPE Networking Fabric Composer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-02
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-73727
EUVD
EUVD-2026-69454

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe networking_fabric_composer *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves weaknesses in the API of HPE Networking Fabric Composer. An authenticated low privilege operator user can exploit these weaknesses to access sensitive information beyond their authorized permissions. This unauthorized access could potentially allow further network service access supported by the software.

Impact Analysis

If exploited, this vulnerability could let an attacker with low privileges gain access to sensitive data they should not have. This might lead to unauthorized network access or further exploitation of network services, potentially compromising system integrity or confidentiality.

Compliance Impact

This vulnerability allows unauthorized access to sensitive information, which could lead to data breaches. Such breaches may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data privacy), potentially resulting in legal penalties and reputational damage.

Mitigation Strategies

Update HPE Networking Fabric Composer to the latest patched version to address the API vulnerabilities. Restrict user privileges to the minimum required for their roles to limit potential data access beyond authorization.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73727. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart