Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. (CVE-2026-73727)

The vulnerability in HPE Networking Fabric Composer's API permits an authenticated user with low privilege operator rights to access sensitive information that should be restricted. Exploitation does not require user interaction and can be performed remotely over the network. The flaw impacts confidentiality but does not affect integrity or availability. No known exploits are reported in the wild. No specific affected versions or patch information is provided.

An attacker with low privilege operator access can retrieve sensitive data beyond their authorization, potentially enabling escalation or further unauthorized network service access. The confidentiality of information is compromised, but integrity and availability remain unaffected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, restrict operator user privileges and monitor for unusual access patterns. Follow vendor updates closely for any forthcoming patches or mitigations.