Hewlett Packard Enterprise (HPE) Instant On
20 CVEs affecting Hewlett Packard Enterprise (HPE) Instant On. Latest disclosed: 2026-09-29. Critical: 5, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76722 | Critical | 9.8 | 2026-09-29 | Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker… |
CVE-2026-76721 | Critical | 9.8 | 2026-09-29 | Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrar… |
CVE-2026-76725 | Critical | 9.6 | 2026-09-29 | A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumve… |
CVE-2026-76724 | Critical | 9.6 | 2026-09-29 | A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform… |
CVE-2026-76723 | Critical | 9.6 | 2026-09-29 | Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to achie… |
CVE-2026-76726 | High | 8.1 | 2026-09-29 | An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access… |
CVE-2025-37166 | High | 7.5 | 2026-01-13 | A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a specially crafted packet could enter a non-re… |
CVE-2025-37165 | High | 7.5 | 2026-01-13 | A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces. A mali… |
CVE-2026-76728 | High | 7.2 | 2026-09-29 | A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side… |
CVE-2026-76727 | High | 7.2 | 2026-09-29 | Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high priv… |
CVE-2026-76729 | Medium | 6.6 | 2026-09-29 | A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause m… |
CVE-2026-76731 | Medium | 6.5 | 2026-09-29 | An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing… |
CVE-2026-76730 | Medium | 6.5 | 2026-09-29 | An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to ci… |
CVE-2026-76732 | Medium | 6.4 | 2026-09-29 | A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerabili… |
CVE-2026-76733 | Medium | 4.9 | 2026-09-29 | A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privil… |
CVE-2026-76734 | Medium | 4.8 | 2026-09-29 | A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of… |
CVE-2026-76735 | Medium | 4.1 | 2026-09-29 | A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an… |
CVE-2026-76736 | Low | 3.3 | 2026-09-29 | A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege aut… |
CVE-2026-76737 | Low | 3.0 | 2026-09-29 | An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacke… |
CVE-2026-76738 | Low | 2.7 | 2026-09-29 | A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileg… |