CVE-2026-73744: Vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer

This vulnerability (CVE-2026-73744) exists in the web-based management interface of HPE Networking Fabric Composer version 7.0.0. An authenticated user with low privilege operator rights can exploit this flaw to cause a denial of service, impacting the availability of the management interface. The vulnerability is classified under CWE-400 (Uncontrolled Resource Consumption). The CVSS v3.1 base score is 3.5, with attack vector network, low attack complexity, requiring privileges and user interaction, and causing only availability impact.

Successful exploitation results in denial of service of the web-based management interface, disrupting its availability. There is no confidentiality or integrity impact reported. The attacker must be authenticated with low privilege operator access, limiting the scope of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, monitor HPE advisories for updates. In the meantime, restrict access to the management interface to trusted users and networks to reduce risk.