CVE-2026-73730: Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API
A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of HPE Networking Fabric Composer with authenticated low-privilege operator users are exposed, because exploitation requires an attacker to authenticate as that role.
What does an attacker need to exploit the vulnerability?
The attacker needs network access to the Fabric Composer API and valid low-privilege operator credentials. No user interaction is required, and the attack complexity is low.
What is the expected impact if exploitation succeeds?
A successful attacker can change the state of certain settings on the vulnerable system. The stated impact is integrity loss; no confidentiality or availability impact is specified.