Local Information Disclosure in HPE Networking Fabric Composer
CVE-2026-73738

4.7MEDIUM

Key Information:

Vendor

HP (HP)

Status
Fabric Composer
Vendor
CVE Published:
1 September 2026

What is CVE-2026-73738?

A vulnerability exists in HPE's Networking Fabric Composer, which could allow an authenticated, low privilege operator user with local access to expose sensitive information. If successfully exploited, this vulnerability could enable an attacker to access data that may lead to further privilege escalation on the system, posing significant security risks to the operational integrity of the affected environment.

Affected Version(s)

Fabric Composer 7.0.0 <= 7.3.3

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Unknown contributor
.