CVE-2026-73714: arubanetworks fabric_composer Improper Privilege Management

Vulnerability summary

CVE-2026-73714 is a high (CVSS 7.6) Improper Privilege Management vulnerability in arubanetworks fabric_composer. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 22.8% of scored vulnerabilities.

Timeline

1. 01-09-2026
   PublishedVulnerability first disclosed.
2. 02-09-2026
   Last modifiedVulnerability information updated.

Description

A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to access data beyond what is authorized by the user's existing privilege level, potentially leading to further unauthorized access.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.