What’s Vulnerable › Vulnerabilities

CVE-2026-44877: Unauthenticated Remote Disclosure of Cryptographic Secrets

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-07 · updated 2026-10-25
• Weakness: CWE-200

Description

An unauthenticated remote disclosure vulnerability has been identified in HPE Networking Instant On 1830, 1930, and 1960 Switches. Successful exploitation of this vulnerability could allow an unauthenticated remote threat actor to access sensitive cryptographic secrets on a vulnerable system.

Affected products

• Hewlett Packard Enterprise (HPE) HPE Networking Instant On: from 3.0.0 through 3.3.3

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05038en_us&docLocale=en_US

Get alerted when CVE-2026-44877 or the next vulnerability affects your stack