CVE-2026-73738: Vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer

This vulnerability affects HPE Fabric Composer version 7.0.0 and involves an information disclosure flaw in the underlying operating system. An authenticated user with low privilege and local access can retrieve sensitive information, which may be used to escalate privileges. The CVSS 3.1 base score is 4.7, reflecting medium severity with a local attack vector, high attack complexity, low privileges required, no user interaction, and impact limited to confidentiality. No patch or official remediation level has been published by the vendor as of the current data.

Successful exploitation allows an authenticated low privilege local user to view sensitive information from the underlying operating system. This could facilitate further privilege escalation or unauthorized access within the affected system. There is no impact on integrity or availability reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity from low privilege accounts. No official fix or temporary workaround has been published by HPE at this time.