CVE-2026-73730 — Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API

CVE-2026-73730

Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API PUBLISHED

Description (CNA)

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Fabric Composer	affected 7.0.0 through 7.3.3

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05133en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.