Path Traversal in Hewlett Packard Enterprise (HPE) Fabric Composer
CVE-2026-73737
An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations, if certain preconditions outside of the attacker's control are met.
Vulnerability class: Path Traversal (Directory Traversal)
CVSS v3 metric
CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N.
Affected products
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-73737?
- CVE-2026-73737 is a medium-severity vulnerability in Hewlett Packard Enterprise (HPE) Fabric Composer, classified under Path Traversal. CVSS score: 4.8/10. Published 2026-09-01.
- How severe is CVE-2026-73737?
- Medium severity. CVSS v3 base score is 4.8 out of 10.