Vulnerability · Published Sep 1, 2026 · Assigned by hpe

CVE-2026-73745Unauthenticated Limited Information Disclosure allows Data Exposure in the API of HPE Networking Fabric Composer

Low 3.1

In plain English

A low-severity information exposure in Fabric Composer from Hewlett Packard Enterprise (HPE). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)3.1Low

Exploit odds (30 days)0.3%top 77.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected system. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access when combined with other vulnerabilities.

Affected products (as reported)

Vendor	Product	Versions
Hewlett Packard Enterprise (HPE)	Fabric Composer	7.0.0 – through 7.3.3

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US