VULNERABILITY INTELLIGENCE
CVE-2026-73742
CVSS score4.3 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-09-01
Last modified2026-09-03
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the affected system.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-290
Primary references
- security-alert@hpe.com — Vendor Advisory