CVE-2026-73747
Low
No strong exploitation signal.
CVSS base
2.5
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS — probability of exploitation (30 days)
0.1%
0.1th percentile
CISA KEV
Not listed
Weakness / dates
CWE-269
Published 2026-09-01 · modified 2026-09-02
CVSS breakdown
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
| Attack Vector | L | Local |
| Attack Complexity | H | High |
| Privileges Required | L | Low |
| User Interaction | N | None |
| Scope | U | Unchanged |
| Confidentiality | N | None |
| Integrity | L | Low |
| Availability | N | None |
Timeline
- 2026-09-01 — Published (NVD)
- 2026-09-02 — Last modified (NVD)
Description
A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user with local access to elevate their user privileges and make limited modifications on the affected system.