CVE-2026-73741: Authenticated Limited File Read allows Data Exposure in HPE Networking Fabric Composer API
Published Sep 1, 2026
·Updated
A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation could allow an attacker to access limited data beyond what is authorized by the user's existing privilege level.
Affected Software
1 affected component
HPE Networking Fabric Composer
Event History
Sep 1, 2026
CVE Published
via MITRE·07:47 PM
Data Sourced
via MITRE·07:47 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be authenticated to the HPE Networking Fabric Composer API as a low-privilege operator user. No user interaction is required.
2
What is the impact of successful exploitation?
A successful attacker may view some system files and access limited data beyond their assigned privileges. The provided impact information indicates confidentiality impact only, with no integrity or availability impact.