CVE-2026-73714: Vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer

This vulnerability in HPE Fabric Composer's API allows an authenticated user with low privilege to access sensitive information beyond their authorization scope. The issue is classified under CWE-269 (Improper Privilege Management). The CVSS 3.1 base score is 7.6, indicating high severity, with network attack vector, low attack complexity, and no user interaction required. The impact includes high confidentiality loss, low integrity loss, and low availability loss. The affected version is exactly 7.0.0. No vendor advisory or patch is currently available, and the product is not a cloud service.

Successful exploitation could lead to unauthorized disclosure of sensitive information beyond the privileges of a low privilege operator user. This may facilitate further unauthorized access or actions within the affected system. The confidentiality impact is high, while integrity and availability impacts are low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Fabric Composer API to trusted users only and monitor for any suspicious activity related to privilege escalation or unauthorized data access.