{"id":"CVE-2026-73736","aliases":["EUVD-2026-69463","GHSA-5g77-7h7m-494f"],"status":"published","title":"Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric Composer","description":"A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0042,"percentile":0.3674,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-552"],"published":"2026-09-01T19:47:16Z","modified":"2026-09-03T15:12:01Z","products":[{"vendor":"arubanetworks","product":"fabric_composer"},{"vendor":"hewlett packard enterprise (hpe)","product":"fabric composer"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us\u0026docLocale=en_US","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73736"},{"url":"https://github.com/advisories/GHSA-5g77-7h7m-494f"}],"sources":{"cve":[{"id":"CVE-2026-73736","title":"Unauthenticated Limited Information Disclosure leads to Data Exposure in HPE Networking Fabric Composer","description":"A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.","status":"published","published":"2026-09-01T19:47:16.871Z","modified":"2026-09-01T20:24:44.813Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T13:43:33.766176Z"}],"euvd":[{"id":"EUVD-2026-69463","description":"A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.","status":"published","published":"2026-09-01T19:47:16Z","modified":"2026-09-01T20:24:44Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:01:16.851436Z"}],"ghsa":[{"id":"GHSA-5g77-7h7m-494f","title":"A vulnerability in the web-based management interface of HPE Networking Fabric Composer could...","description":"A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.","status":"published","published":"2026-09-01T21:31:49Z","modified":"2026-09-01T21:31:49Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T15:11:14.651489Z"}],"nvd":[{"id":"CVE-2026-73736","description":"A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful exploitation could allow an attacker to read files within the affected directory.","status":"published","published":"2026-09-01T20:17:21.217Z","modified":"2026-09-03T15:12:01.43Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-552"],"updated_at":"2026-11-02T14:12:43.04945Z"}]}}