Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service… (CVE-2026-73710)

CVE-2026-73710 describes vulnerabilities in an API endpoint of HPE Networking Fabric Composer that enable unauthenticated remote attackers to conduct denial of service attacks. Successful exploitation can also lead to limited unauthorized changes to the underlying OS. The attack impacts system availability and necessitates manual intervention to restore normal operation. The CVSS 3.1 score is 8.2 (high severity) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H, indicating network attack vector, low complexity, no privileges or user interaction required, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact. No patch or remediation information is provided in the available data.

The vulnerability allows unauthenticated remote attackers to disrupt the availability of HPE Networking Fabric Composer systems, causing denial of service that requires manual recovery. Additionally, attackers can make limited unauthorized modifications to the underlying operating system, potentially affecting system integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor for unusual activity and prepare for manual recovery in case of service disruption.