CVE-2026-73736
Awaiting Analysis Awaiting Analysis - Queue

Web-Based Management Interface File Read Vulnerability in HPE Networking Fabric Composer

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-02
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
CVE-2026-73736
EUVD
EUVD-2026-69463

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe nw_fabric_composer *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-552 The product makes files or directories accessible to unauthorized actors, even though they should not be.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an unauthenticated remote attacker to view some system files through the web-based management interface of HPE Networking Fabric Composer. It does not require authentication or user interaction to exploit.

Detection Guidance

Since this vulnerability allows unauthenticated remote access to view system files, check for unauthorized file access attempts in web server logs. Look for unusual GET requests to sensitive paths like /etc/passwd or /config files. Ensure your HPE Networking Fabric Composer is updated to the latest version to patch this issue.

Impact Analysis

An attacker could read sensitive files within the affected directory, potentially exposing confidential system information or configurations. This could lead to further attacks or data breaches.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements for GDPR, HIPAA, or other regulations that mandate strict data protection and access controls.

Mitigation Strategies

Restrict access to the web-based management interface of HPE Networking Fabric Composer to trusted networks or IP addresses. Ensure strong authentication mechanisms are in place and update to the latest patched version if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73736. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart