CVE-2026-73727

MediumCVSS 6.5/10Last modified Sep 2, 2026

Description

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A successful exploit allows an attacker to access data beyond what is authorized by the user's existing privilege level, which could be used to potentially gain further access to network services supported by HPE Networking Fabric Composer.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-863CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Sep 1, 2026
Last modified
Sep 2, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-737286.5Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operatoCVE-2026-737296.5A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator useCVE-2026-73738.5Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows hostCVE-2026-737306.5A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticatCVE-2026-737316.1A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to coCVE-2026-737325.6A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator useCVE-2026-737335.4Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent CVE-2026-737345.4A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to reCVE-2026-737355.4Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some informaCVE-2026-737365.3A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to viCVE-2026-737374.8An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could CVE-2026-737384.7A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator use
CVE-2026-73727: Medium severity, CVSS 6.5 | Vulnix