What is CVE-2026-73736?

CVE-2026-73736 is a medium-severity vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer, classified under Files or Directories Accessible to External Parties. CVSS score: 5.3/10. Published 2026-09-01.

How severe is CVE-2026-73736?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer

CVE-2026-73736

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Hewlett Packard Enterprise (Hpe) Fabric Composer

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

References

security-alert@hpe.com

Frequently asked questions

What is CVE-2026-73736?: CVE-2026-73736 is a medium-severity vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer, classified under Files or Directories Accessible to External Parties. CVSS score: 5.3/10. Published 2026-09-01.
How severe is CVE-2026-73736?: Medium severity. CVSS v3 base score is 5.3 out of 10.