CVE-2026-73732
Local Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
- State
- Published
- Severity
- 5.6 Medium
- Published
- Sep 1, 2026
- Updated
- Sep 1, 2026
- Reserved
- Aug 13, 2026
Description
A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to obtain sensitive information. Successful exploitation could allow an attacker to retrieve sensitive data which could be used to gain further unauthorized access to the affected system and to other systems it interacts with.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.6 Medium | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N | hpe |
Weaknesses
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected Products
| Product | Versions |
|---|---|
Fabric ComposerHewlett Packard Enterprise (HPE) |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.