1. Home
  2. CVE Database
  3. CVE-2026-73737
MEDIUM · 4.8

CVE-2026-73737

An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate use...

Vulnerability Description

An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations, if certain preconditions outside of the attacker's control are met.

CVSS Score

4.8

MEDIUM

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
ArubanetworksFabric Composer<= 7.3.3

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2026-73737?

CVE-2026-73737 is a vulnerability with a CVSS score of 4.8 (MEDIUM). An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate use...

How severe is CVE-2026-73737?

CVE-2026-73737 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-73737?

Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Fabric Composer.