A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. (CVE-2026-73714)

CVE-2026-73714 describes a vulnerability in the API of HPE Networking Fabric Composer that allows an authenticated user with low privilege to access sensitive information beyond their authorization. This could lead to unauthorized data exposure and potentially facilitate further unauthorized actions within the system. The vulnerability has a CVSS 3.1 score of 7.6, indicating high severity, with network attack vector, low attack complexity, and no user interaction required.

Successful exploitation allows an authenticated low privilege operator to access sensitive information beyond their privilege level, which could lead to further unauthorized access or actions within the affected system. The confidentiality impact is high, integrity impact is low, and availability impact is low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict access to the API to trusted users and monitor for unusual access patterns consistent with privilege escalation attempts.