CVE-2026-73726
Low
No strong exploitation signal.
CVSS base
6.8
MEDIUM
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS — probability of exploitation (30 days)
0.2%
6.7th percentile
CISA KEV
Not listed
Weakness / dates
CWE-287
Published 2026-09-01 · modified 2026-09-02
CVSS breakdown
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
| Attack Vector | A | Adjacent |
| Attack Complexity | H | High |
| Privileges Required | N | None |
| User Interaction | N | None |
| Scope | U | Unchanged |
| Confidentiality | H | High |
| Integrity | H | High |
| Availability | N | None |
Timeline
- 2026-09-01 — Published (NVD)
- 2026-09-02 — Last modified (NVD)
Description
A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data.