CVE-2026-73723: Vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer

This vulnerability in HPE Fabric Composer's web management interface permits an authenticated user with low privileges to escalate their permissions and execute state-changing operations that should be restricted. The issue is classified under CWE-269 (Improper Privilege Management). The affected version is 7.0.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and low availability impact.

An attacker with valid low privilege credentials can perform unauthorized state-changing actions on the platform, potentially compromising the integrity of the system. There is no confidentiality impact reported. Availability impact is low. This could lead to unauthorized configuration changes or operational disruptions within the Fabric Composer environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the management interface to trusted users only and monitor for suspicious activity. Avoid granting unnecessary operator privileges to users.