Medium severity · published Sep 1, 2026
CVE-2026-73732
Local Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
5.6
CVSS
0.1%
EPSS
No
On KEV
Description
A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to obtain sensitive information. Successful exploitation could allow an attacker to retrieve sensitive data which could be used to gain further unauthorized access to the affected system and to other systems it interacts with.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Fabric Composer · Hewlett Packard Enterprise (HPE)
7.0.0 through 7.3.3 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-73732
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-73732
Vendor Advisory
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US
More from Fabric Composer
10.0
CVE-2026-76658
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon
10.0
CVE-2026-76657
Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access
9.6
CVE-2026-19766
Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
9.0
CVE-2026-73701
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
9.0
CVE-2026-73700
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface
