CVE-2026-73742

Awaiting Analysis Awaiting Analysis - Queue

Authenticated Source Address Spoofing in HPE Networking Fabric Composer

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the affected system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-01

Generated

2026-09-02

AI Q&A

2026-09-02

EPSS Evaluated

N/A

NVD

CVE-2026-73742

EUVD

EUVD-2026-69469

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_fabric_composer	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-290	This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

Executive Summary

This vulnerability allows an authenticated low privilege operator user to spoof the source address of their requests in an API endpoint of HPE Networking Fabric Composer. This could lead to inaccurate attribution information being recorded on the affected system.

Impact Analysis

An attacker could exploit this to manipulate logs or records, making it appear as though actions were performed by someone else. This could lead to incorrect accountability or potential misuse of system privileges.

Compliance Impact

This vulnerability could impact compliance by allowing inaccurate attribution of user actions, which may violate record-keeping and audit requirements in standards like GDPR and HIPAA. Unreliable source attribution could hinder investigations into data breaches or unauthorized activities.

Mitigation Strategies

Implement strict input validation for API requests to prevent source address spoofing. Review and restrict low privilege operator user permissions to minimize potential misuse. Monitor API logs for unusual attribution changes or request patterns.

Hi! I’m here to help you understand CVE-2026-73742. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70