CVE-2026-73741: Authenticated Limited File Read allows Data Exposure in HPE Networking Fabric Composer API
Published Sep 1, 2026
·Updated
A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation could allow an attacker to access limited data beyond what is authorized by the user's existing privilege level.
Affected Software
2 affected components
HPE Networking Fabric Composer
Arubanetworks Fabric Composer<=7.3.3
Event History
Sep 1, 2026
CVE Published
via MITRE·07:47 PM
Data Sourced
via MITRE·07:47 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be authenticated to the HPE Networking Fabric Composer API as a low-privilege operator user. No user interaction is required.
2
What is the impact of successful exploitation?
A successful attacker may view some system files and access limited data beyond their assigned privileges. The provided impact information indicates confidentiality impact only, with no integrity or availability impact.