CVE-2026-76725

A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could result in a complete bypass of security restrictions, potentially leading to remote code execution with elevated privileges.

Score

CVSS 3.1 9.6 Critical

Status

Awaiting Analysis - security-alert@hpe.com

Published

2026-09-29

Last modified

2026-10-01

Weaknesses

CWE-287

Affected products

• Instant On (Hewlett Packard Enterprise Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US