CVE-2026-73742 — Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint
A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their req…
Published: 2026-09-01 · CVSS: 4.3 · CVSS 3.1
A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the affected system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7