CVE-2026-73728

Analyzed Analyzed - Analysis Complete

Denial-of-Service in HPE Networking Fabric Composer API

Publication date: 2026-09-01

Last updated on: 2026-09-03

Assigner: Hewlett Packard Enterprise (HPE)

Description

Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-03

Generated

2026-09-22

AI Q&A

2026-09-02

EPSS Evaluated

2026-09-20

NVD

CVE-2026-73728

EUVD

EUVD-2026-69455

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	fabric_composer	to 7.3.3 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a denial-of-service issue in the API of HPE Networking Fabric Composer. An authenticated low privilege operator user can exploit it to disrupt the normal operation of the affected service.

Detection Guidance

Detection requires monitoring for unusual API activity or service disruptions in HPE Networking Fabric Composer. Check logs for repeated failed authentication attempts or abnormal API calls. Use network monitoring tools to detect service interruptions. No specific commands are provided in the available context.

Impact Analysis

If exploited, this vulnerability could interrupt the normal operation of the HPE Networking Fabric Composer service, leading to service unavailability for legitimate users.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by disrupting the availability of the HPE Networking Fabric Composer service. Denial-of-service conditions may lead to unauthorized data access or processing delays, which could violate GDPR's data availability principles or HIPAA's requirement for timely access to protected health information.

Mitigation Strategies

Apply patches or updates provided by HPE to address the denial-of-service vulnerabilities in the API of HPE Networking Fabric Composer. Limit user privileges to reduce the risk of exploitation by low-privilege operator users.

Hi! I’m here to help you understand CVE-2026-73728. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70