A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to gain… (CVE-2026-73743)

This vulnerability affects the web-based management interface of HPE Networking Fabric Composer. An unauthenticated remote attacker can exploit it to gain insight into some data handled by the interface, which is exposed in cleartext. The CVSS 3.1 base score is 3.7 (low), reflecting network attack vector with high attack complexity, no privileges required, no user interaction, and limited confidentiality impact. There is no indication of integrity or availability impact. No patch or remediation information is provided in the available data.

An attacker exploiting this vulnerability can access some sensitive data in cleartext from the management interface without authentication. This could potentially expose network infrastructure details that might facilitate further attacks. However, the impact is limited to confidentiality with no direct effect on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, restrict network access to the management interface to trusted administrators only and monitor for unusual access attempts.