Authentication Bypass Vulnerability in HPE Networking Fabric Composer
CVE-2026-73726

6.8MEDIUM

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73726?

A vulnerability has been detected in HPE Networking Fabric Composer that enables an unauthenticated adjacent actor to bypass existing authentication mechanisms. This flaw allows attackers to potentially gain unauthorized administrative access, altering system configurations, and accessing or manipulating sensitive data without proper authentication. Organizations relying on this product should take immediate steps to assess their security posture and implement recommended mitigations.

Affected Version(s)

Fabric Composer 7.0.0 <= 7.3.3

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Unknown contributor
.