CVE-2026-73741

MediumCVSS 4.3/10Last modified Sep 3, 2026

Description

A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation could allow an attacker to access limited data beyond what is authorized by the user's existing privilege level.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Sep 1, 2026
Last modified: Sep 3, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-737424.3A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the s CVE-2026-737433.7A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to ga CVE-2026-737443.5A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authent CVE-2026-737453.1A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some informatio CVE-2026-737463.1A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operat CVE-2026-737472.5A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an aut CVE-2026-737482.2A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sens CVE-2026-737499.8Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote at CVE-2026-73757.5UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-737508.8Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacke CVE-2026-737518.8An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary CVE-2026-737528.8An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability all