CVE-2026-73733: Vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer

This vulnerability in HPE Fabric Composer's API enables an authenticated low privilege operator to bypass authentication controls. Exploitation could allow the attacker to maintain limited access to the system beyond the intended session or permission revocation. The issue is classified under CWE-287 (Improper Authentication). The affected version explicitly identified is 7.0.0. There is no known exploit in the wild and no vendor-provided remediation information at this time.

An attacker with low privilege authenticated access can bypass authentication controls to retain limited system access after it should have been revoked. This could lead to unauthorized persistence on the affected system, potentially allowing further unauthorized actions within the scope of the retained access. The confidentiality and integrity impacts are limited, and availability is not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict low privilege operator access and monitor for unusual activity related to authentication bypass attempts.