CVE-2026-73714

HighCVSS 7.6/10Last modified Sep 2, 2026

Description

A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to access data beyond what is authorized by the user's existing privilege level, potentially leading to further unauthorized access.

Metrics

CVSS 3.1 7.6/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Sep 1, 2026
Last modified
Sep 2, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-737157.5A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service aCVE-2026-737167.5A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthCVE-2026-737177.5A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unautheCVE-2026-737187.4A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to acCVE-2026-737197.2An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative usCVE-2026-73729.0A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2. A specially crafted HTTP requCVE-2026-737207.2Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code exCVE-2026-737217.2Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks aCVE-2026-737227.2Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remotCVE-2026-737237.1A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitationCVE-2026-737247.1Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticateCVE-2026-737257.0A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerabil
CVE-2026-73714: High severity, CVSS 7.6 | Vulnix