A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information… (CVE-2026-73745)
Description
A vulnerability exists in the API endpoint of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to view certain information handled by the system. Exploiting this vulnerability could provide insight into internal services and workflows, potentially increasing the risk of unauthorized access if combined with other vulnerabilities. The issue has a low severity rating and a CVSS score of 3.1.
CVSS v3.1
Score 3.1low
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-73745 is a low-severity vulnerability in the API endpoint of HPE Networking Fabric Composer. It allows an unauthenticated remote attacker to gain limited information disclosure about internal services and workflows. The vulnerability does not directly impact integrity or availability, and requires user interaction with high attack complexity. No known exploits are reported in the wild.
Potential Impact
The vulnerability results in limited information disclosure (confidentiality impact is low) without affecting integrity or availability. This information could aid an attacker in understanding internal system operations, potentially facilitating further attacks if combined with other vulnerabilities.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided at this time.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-6wmc-9qv9-r53c
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-73745"]
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
Threat ID: 6a984585acd9273b496adc57
Added to database: 09/02/2026, 15:49:25 UTC
Last enriched: 09/07/2026, 21:24:31 UTC
Last updated: 10/18/2026, 06:48:19 UTC
Views: 55
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.