CVE-2026-76737: Hewlett Packard Enterprise HPE Instant On

Low severity, CVSS 3.0. EPSS: 0.1% chance of exploitation in the next 30 days.

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of the affected service.

Affected products

• Hewlett Packard Enterprise HPE Instant On: from 0.0.0.0, up to and including 3.4.1.0

Published 2026-09-29. Last modified 2026-09-30.