CVE-2026-73745

LowCVSS 3.1/10Last modified Sep 2, 2026

Description

A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected system. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access when combined with other vulnerabilities.

Metrics

CVSS 3.1 3.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Sep 1, 2026
Last modified: Sep 2, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-737463.1A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operat CVE-2026-737472.5A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an aut CVE-2026-737482.2A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sens CVE-2026-737499.8Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote at CVE-2026-73757.5UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-737508.8Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacke CVE-2026-737518.8An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary CVE-2026-737528.8An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability all CVE-2026-737538.8Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a pr CVE-2026-737545.3Denial-of-service vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation could allow an authenticated user t CVE-2026-737555.7A privilege escalation vulnerability exists in the API endpoint of AOS-CX. Successful exploitation could allow an authenticated low-privileg CVE-2026-737565.9A vulnerability in an API endpoint of AOS-CX could allow a remote unauthenticated attacker to obtain sensitive information via a man-in-the-