Instant On (Hewlett Packard Enterprise Hpe) - vulnerabilities (CVEs)
20 CVEs, 18 in the last 30 days, 1 known versions, newest CVE from 2026-09-29. Vendor: Hewlett Packard Enterprise Hpe.
CVEs of Instant On
- CVE-2026-76738 - CVSS 2.7 (low), 2026-09-29: A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative…
- CVE-2026-76737 - CVSS 3 (low), 2026-09-29: An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an…
- CVE-2026-76736 - CVSS 3.3 (low), 2026-09-29: A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege…
- CVE-2026-76735 - CVSS 4.1 (medium), 2026-09-29: A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow…
- CVE-2026-76734 - CVSS 4.8 (medium), 2026-09-29: A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of…
- CVE-2026-76733 - CVSS 4.9 (medium), 2026-09-29: A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative…
- CVE-2026-76732 - CVSS 6.4 (medium), 2026-09-29: A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this…
- CVE-2026-76731 - CVSS 6.5 (medium), 2026-09-29: An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent…
- CVE-2026-76730 - CVSS 6.5 (medium), 2026-09-29: An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to…
- CVE-2026-76729 - CVSS 6.6 (medium), 2026-09-29: A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause…
- CVE-2026-76728 - CVSS 7.2 (high), 2026-09-29: A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a…
- CVE-2026-76727 - CVSS 7.2 (high), 2026-09-29: Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high…
- CVE-2026-76726 - CVSS 8.1 (high), 2026-09-29: An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network…
- CVE-2026-76725 - CVSS 9.6 (critical), 2026-09-29: A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to…
- CVE-2026-76724 - CVSS 9.6 (critical), 2026-09-29: A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform…
- CVE-2026-76723 - CVSS 9.6 (critical), 2026-09-29: Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to…
- CVE-2026-76722 - CVSS 9.8 (critical), 2026-09-29: Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote…
- CVE-2026-76721 - CVSS 9.8 (critical), 2026-09-29: Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run…
- CVE-2025-37166 - CVSS 7.5 (high), 2026-01-13: A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a specially crafted packet could enter a…
- CVE-2025-37165 - CVSS 7.5 (high), 2026-01-13: A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces. A…