CVE-2026-73748
Awaiting Analysis Awaiting Analysis - Queue

HPE Networking Fabric Composer Information Disclosure

Vulnerability report for CVE-2026-73748, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-01

Last updated on: 2026-09-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking Fabric Composer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-01
Last Modified
2026-09-01
Generated
2026-09-02
AI Q&A
2026-09-01
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe networking_fabric_composer *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-312 The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an attacker with administrative access to HPE Networking Fabric Composer to retrieve sensitive information in cleartext. The exposed data could potentially be used to gain further unauthorized access to network services managed by the system.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to sensitive network information, potentially compromising network security and allowing further attacks on supported services.

Compliance Impact

This vulnerability allows attackers with administrative access to retrieve sensitive information in cleartext, which could expose personal or confidential data. This may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data privacy) by failing to protect sensitive information from unauthorized access.

Mitigation Strategies

Restrict administrative access to HPE Networking Fabric Composer to prevent unauthorized access to sensitive information. Ensure all communications are encrypted and monitor logs for suspicious activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73748. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart