CVE-2026-73742: Vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer
Description
A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the affected system.
CVSS v3.1
Score 4.3medium
Affected software
Hewlett Packard Enterprise (HPE)
Fabric Composer
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects HPE Fabric Composer 7.0.0 and allows an authenticated user with low privilege operator rights to spoof the source address attributed to their API requests. The flaw resides in an API endpoint that does not properly validate the source address, enabling inaccurate logging or attribution. The CVSS 3.1 base score is 4.3 (medium), reflecting that the vulnerability requires network access and low privilege authentication but does not impact confidentiality or availability, only integrity of attribution data.
Potential Impact
Successful exploitation allows an attacker with low privilege authenticated access to cause inaccurate source address attribution in system logs or records. This could hinder forensic analysis or auditing by misleading attribution information. There is no direct impact on confidentiality or availability reported.
Mitigation Recommendations
No official patch or remediation is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict operator user privileges and monitor for suspicious activity related to source address spoofing in API requests.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- hpe
- Date Reserved
- 2026-08-13T16:38:10.813Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a972d24acd9273b4921572b
Added to database: 09/01/2026, 19:53:08 UTC
Last enriched: 09/07/2026, 14:17:13 UTC
Last updated: 10/17/2026, 06:48:20 UTC
Views: 64
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.