Remote File Access Vulnerability in HPE Networking Fabric Composer
CVE-2026-73736

5.3MEDIUM

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73736?

A vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that may permit an unauthenticated remote attacker to gain access to sensitive system files. This security flaw enables malicious actors to read files from specific directories, potentially exposing crucial information and compromising system integrity.

Affected Version(s)

Fabric Composer 7.0.0 <= 7.3.3

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Unknown contributor
.