A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sensitive… (CVE-2026-73739)

CVE-2026-73739 is a vulnerability in the API of HPE Networking Fabric Composer. It permits an attacker who already has administrative privileges to access sensitive information in an unencrypted, cleartext format. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS v3.1 base score is 4.4 (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N), reflecting that the attacker requires local access with high privileges and that the impact is confidentiality loss only. No patch or remediation details are provided in the available data.

An attacker with administrative privileges can retrieve sensitive information in cleartext that was expected to remain protected. This compromises confidentiality but does not affect integrity or availability. The vulnerability requires high privileges and local access, limiting the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, monitor vendor communications for updates. In the meantime, restrict administrative access to trusted personnel only to reduce risk.