CVE-2026-73736: Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric Composer
Published Sep 1, 2026
·Updated
A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.
Affected Software
1 affected component
HPE Networking Fabric Composer
Event History
Sep 1, 2026
CVE Published
via MITRE·07:47 PM
Data Sourced
via MITRE·07:47 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker can exploit the issue through the web-based management interface. No privileges or user interaction are required.
2
What information could be exposed?
Successful exploitation allows reading some system files within the affected directory. The available information does not identify the specific files or directory.
3
What is the impact on system integrity and availability?
The reported impact is limited to confidentiality. No integrity modification or denial-of-service impact is indicated.