CVE-2026-73734: Vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer

This vulnerability affects HPE Fabric Composer version 7.0.0 and involves an open redirect flaw in its web-based management interface. An unauthenticated remote attacker can exploit this to redirect users to arbitrary URLs. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and limited impact on confidentiality and integrity. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

The vulnerability allows attackers to redirect users to arbitrary URLs, which may facilitate phishing or other social engineering attacks. The impact on confidentiality and integrity is limited, and there is no impact on availability. No direct system compromise or data breach is indicated by the available information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when interacting with links in the Fabric Composer management interface and consider additional user awareness training to mitigate phishing risks.