CVE-2026-73743

Awaiting Analysis Awaiting Analysis - Queue

Web-Based Management Interface Information Disclosure in HPE Networking Fabric Composer

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to gain insight into some data handled by the affected interface. A successful exploit could allow an attacker to gain access to some data in a cleartext format possibly exposing other network infrastructure to further compromise.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-01

Last Modified

2026-09-01

Generated

2026-09-02

AI Q&A

2026-09-02

EPSS Evaluated

N/A

NVD

CVE-2026-73743

EUVD

EUVD-2026-69470

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_fabric_composer	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-319	The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Attack-Flow Graph

Executive Summary

This vulnerability allows an unauthenticated remote attacker to access some data handled by the web-based management interface of HPE Networking Fabric Composer. The exposed data may be in cleartext, which could potentially lead to further compromise of network infrastructure.

Impact Analysis

An attacker could gain access to sensitive data in cleartext, which might expose network infrastructure details and enable further attacks. This could lead to unauthorized access or control of network resources.

Compliance Impact

This vulnerability exposes some data in cleartext, which could potentially lead to unauthorized access to sensitive information. This may impact compliance with standards like GDPR (data protection) or HIPAA (healthcare data) if the exposed data falls under their regulated categories.

Mitigation Strategies

Restrict access to the web-based management interface of HPE Networking Fabric Composer to trusted networks and users. Ensure the interface is not exposed to the internet or untrusted networks. Apply any available patches or updates from HPE to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-73743. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70