{"id":"CVE-2026-73736","state":"PUBLISHED","title":"Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric Composer","description":"A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.","publishedAt":"2026-09-01T19:47:16.871Z","updatedAt":"2026-09-01T20:24:44.813Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"hpe"},"assigner":"hpe","products":["Hewlett Packard Enterprise (HPE) Fabric Composer"],"affected":[{"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","defaultStatus":"affected","versions":[{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.3.3","versionType":"semver"}]}],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US"],"weaknesses":["CWE-552"],"ingestedAt":"2026-10-29T20:12:58.252Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/73xxx/CVE-2026-73736.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-73736","state":"PUBLISHED","datePublished":"2026-09-01T19:47:16.871Z","dateUpdated":"2026-09-01T20:24:44.813Z","assignerShortName":"hpe","assignerOrgId":"eb103674-0d28-4225-80f8-39fb86215de0","dateReserved":"2026-08-13T16:37:26.897Z"},"containers":{"cna":{"title":"Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric Composer","descriptions":[{"lang":"en","value":"A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory."}],"affected":[{"vendor":"Hewlett Packard Enterprise (HPE)","product":"Fabric Composer","defaultStatus":"affected","versions":[{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.3.3","versionType":"semver"}]}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","availabilityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"providerMetadata":{"shortName":"hpe","orgId":"eb103674-0d28-4225-80f8-39fb86215de0","dateUpdated":"2026-09-01T20:24:44.813Z"},"credits":[{"lang":"en","type":"reporter","value":"This vulnerability was discovered by internal security research at HPE Networking."}],"source":{"advisory":"HPESBNW05133","discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-01T20:16:31.023500Z","id":"CVE-2026-73736","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-552","type":"CWE","lang":"en","description":"CWE-552 Files or Directories Accessible to External Parties"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-01T20:16:33.399Z"}}]}}}