A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive… (CVE-2026-73748)

This vulnerability in HPE Networking Fabric Composer involves an interface that improperly exposes sensitive information in cleartext to users with administrative privileges. Exploitation requires administrative access and does not involve user interaction. The vulnerability is classified under CWE-312 (Cleartext Storage of Sensitive Information). The CVSS 3.1 base score is 2.2, reflecting low impact primarily on confidentiality. No known exploits are reported in the wild, and no patch or remediation information is provided.

An attacker with administrative privileges can retrieve sensitive information in cleartext from the affected interface. This information disclosure could potentially facilitate further unauthorized access to network services managed by HPE Networking Fabric Composer. There is no impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitor vendor communications for updates. Restrict administrative access to trusted personnel only to reduce risk.