HPE Fabric Composer CVE-2026-73748

Exploitation requires a valid administrative account on HPE Networking Fabric Composer (PR:H). The high attack complexity (AC:H) implies an additional condition beyond mere authentication - likely a specific interface state, particular configuration, or a non-default deployment mode; the exact condition is not specified in the description. Only the confidentiality dimension is impacted (C:L), and there is no integrity or availability effect. The limiting factors - requiring full admin privileges and satisfying an unspecified complexity condition - make this inaccessible to external unauthenticated attackers and limit it to a narrow insider or post-compromise scenario.

CVSS 2.2 places this at the lowest tier of severity, and the vector components support that rating: AV:N indicates the management interface is network-accessible, but AC:H and PR:H jointly require that the attacker already possess administrative credentials and satisfy an additional complexity prerequisite - making opportunistic remote exploitation implausible. The confidentiality impact is rated C:L, consistent with partial rather than full credential or data exposure. No EPSS score was provided, and the vulnerability does not appear in the CISA KEV catalog, confirming no known active exploitation. There is no public proof-of-concept. The primary realistic threat model is a malicious or negligent insider with existing admin access, or a post-compromise scenario where an attacker has already escalated to administrator level and uses this to move laterally into connected network services. In practice, even organizations with highly sensitive HPE fabric deployments should rank this low in their remediation queue, prioritising it only after confirming whether exposed data includes reusable credentials for critical network segments.

An administrator - or an attacker who has already compromised an admin account through phishing or credential theft - logs into HPE Networking Fabric Composer's management interface and navigates to the affected section, where sensitive data such as network service credentials is displayed in cleartext. The attacker records these credentials and uses them to authenticate directly to downstream network devices or services managed by Fabric Composer. No public exploit code is available, and the high complexity prerequisite suggests manual exploitation rather than an automated tool.