A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access… (CVE-2026-73718)

CVE-2026-73718 is a vulnerability in the web-based management interface of HPE Networking Fabric Composer. It permits an unauthenticated remote attacker to gain access to sensitive information if they can convince an authenticated user to interact with a specially crafted URL. The disclosed information could potentially be leveraged to gain additional access to network services supported by the product. The vulnerability requires user interaction (UI:R) but no privileges (PR:N) and has a high confidentiality impact (C:H) without affecting integrity or availability.

Successful exploitation results in high confidentiality impact through unauthorized disclosure of sensitive information. This information could be used to facilitate further unauthorized access to network services managed by HPE Networking Fabric Composer. There is no direct impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided at this time. Until a patch is available, users should exercise caution with links received and avoid interacting with suspicious URLs in the management interface.