VulnerabilityAnalyzed
CVE-2026-73737
An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer.
MEDIUM 4.8EPSS 0.14%
Does this matter?
Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.
Description
An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations, if certain preconditions outside of the attacker's control are met.
- CVSS 3.1
- 4.8 MEDIUMCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 0.14% probability · 4th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- arubanetworks/fabric composer
- Source
- security-alert@hpe.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.