CVE-2026-73737

Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer (affected versions not specified)

Description An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations, provided certain preconditions outside of the attacker's control are met.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.