Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2026-73708

Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to obtain elevated privileges and modify settings beyond what is authorized by the user's existing privilege level on a vulnerable system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) Fabric Composer

Default version status: affected

  • 7.0.0 to ≤ 7.3.3affected

References