CVE-2026-73739: Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API
A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve sensitive information that was expected to remain protected within the affected system.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker must already have administrative privileges on the affected HPE Networking Fabric Composer system. The attack vector is local.
What is the expected impact of successful exploitation?
An attacker can retrieve sensitive information in cleartext that was expected to remain protected. The provided severity vector indicates confidentiality impact only, with no stated integrity or availability impact.
Who should prioritize triage?
Organizations with HPE Networking Fabric Composer deployments where administrative access is available to potentially untrusted or compromised local users should prioritize review, because exploitation requires high privileges.