CVE-2026-73737

4.8 Moyenne

Publiée le 01/09/2026 à 22:17 · Modifiée le 03/09/2026 à 17:12 · Analysée par le NVD · Source : security-alert@hpe.com

Description

An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations, if certain preconditions outside of the attacker's control are met.

Traduire en français

Produits concernés

Hewlett Packard Enterprise (HPE) Fabric Composer
Arubanetworks fabric composer

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.8 Moyenne	security-alert@hpe.com	`CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-22

Références

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories