CVE-2026-76729: Hewlett Packard Enterprise HPE Instant On

Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days.

A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service condition or remote code execution in the affected system function.

Affected products

• Hewlett Packard Enterprise HPE Instant On: from 0.0.0.0, up to and including 3.4.1.0

Published 2026-09-29. Last modified 2026-10-01.