CVE-2026-73734

Awaiting Analysis Awaiting Analysis - Queue

Unauthenticated URL Redirection in HPE Networking Fabric Composer

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to redirect users to an arbitrary URL.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-01

Generated

2026-09-02

AI Q&A

2026-09-02

EPSS Evaluated

N/A

NVD

CVE-2026-73734

EUVD

EUVD-2026-69461

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_fabric_composer	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-601	The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Attack-Flow Graph

Executive Summary

This vulnerability allows an unauthenticated remote attacker to redirect users of HPE Networking Fabric Composer's web-based management interface to an arbitrary URL. This could potentially trick users into visiting malicious sites or disclosing sensitive information.

Impact Analysis

If exploited, this vulnerability could lead to phishing attacks, credential theft, or malware infections. Users might unknowingly visit harmful websites, compromising their data or the network's security.

Compliance Impact

This vulnerability could potentially impact compliance with standards like GDPR and HIPAA by enabling unauthorized redirection of users to malicious URLs. This may lead to phishing attacks or unauthorized data access, which are critical concerns under these regulations.

Mitigation Strategies

Update HPE Networking Fabric Composer to the latest patched version to address the URL redirection vulnerability. Restrict access to the web-based management interface to trusted networks or IP addresses. Monitor network traffic for unusual redirects or unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-73734. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70