CVE-2026-73735

Awaiting Analysis Awaiting Analysis - Queue

Authenticated Information Disclosure in HPE Networking Fabric Composer API

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some information beyond their privilege level. Successful exploitation could allow an attacker to obtain limited information and/or make limited changes beyond what is authorized by the user's existing privilege level.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-01

Generated

2026-09-02

AI Q&A

2026-09-02

EPSS Evaluated

N/A

NVD

CVE-2026-73735

EUVD

EUVD-2026-69462

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_fabric_composer	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-552	The product makes files or directories accessible to unauthorized actors, even though they should not be.

Attack-Flow Graph

Executive Summary

This vulnerability in HPE Networking Fabric Composer's API allows an authenticated low privilege operator user to access or modify information beyond their authorized level. Exploitation could lead to unauthorized disclosure of limited data or minor unauthorized changes.

Impact Analysis

An attacker with low privileges could gain access to sensitive information or make unauthorized changes within the system. This may lead to data breaches, unauthorized modifications, or further exploitation of the system.

Compliance Impact

This vulnerability could lead to unauthorized access or disclosure of sensitive data, potentially violating GDPR or HIPAA requirements for data protection and access controls. Compliance may be compromised if unauthorized data exposure occurs.

Mitigation Strategies

Update HPE Networking Fabric Composer to the latest patched version to address privilege escalation risks. Review user access controls and ensure low-privilege operators have only necessary permissions. Monitor API logs for unusual activity or unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-73735. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70