SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-73731

MEDIUM · CVSS 6.1 EPSS 0.19% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-01 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The web-based management interface of HPE Networking Fabric Composer is vulnerable to a reflected cross-site scripting (XSS) attack, allowing unauthenticated remote attackers to execute arbitrary script code in a user's browser. This could lead to unauthorized actions or data exposure within the context of the affected interface. Organizations using this product should prioritize remediation to protect against potential exploitation and safeguard user interactions.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-73731
Severity
MEDIUM
CVSS
6.1
EPSS
0.19%

Original NVD Description

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

Related CVEs

Other vulnerabilities affecting the same vendor(s)