Hewlett Packard Enterprise HPE HPE Networking Instant On vulnerabilities

3 CVEs affecting Hewlett Packard Enterprise HPE HPE Networking Instant On, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-44877, published 2026-07-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-37102, published 2025-07-08. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. An authenticated command injection vulnerability exists in the Command line interface of HPE Networking Instant On Access Points. A successful exploitation could allow a remote attacker with…
CVE-2025-37103, published 2025-07-08. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Hard-coded login credentials were found in HPE Networking Instant On Access Points, allowing anyone with knowledge of it to bypass normal device authentication. Successful exploitation could allow…
CVE-2026-44877, published 2026-07-07. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successful exploitation of this vulnerability could allow an…