CVE-2026-73732: Vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer

This vulnerability affects HPE Fabric Composer version 7.0.0 and arises from a flaw in the underlying operating system. An authenticated user with low privileges and local access can exploit this issue to access sensitive information. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS 3.1 base score is 5.6, reflecting a medium severity with attack vector local, high attack complexity, low privileges required, no user interaction, and impact primarily on confidentiality. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

Successful exploitation allows an authenticated low privilege operator user with local access to obtain sensitive information. This could lead to further unauthorized access to the affected system and other systems it interacts with. The impact is limited to confidentiality; integrity and availability are not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, monitor HPE advisories for updates. Limit local access to trusted users and enforce strict privilege controls to reduce risk until a patch is available.