What’s Vulnerable › Vulnerabilities
CVE-2026-76726: Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint
- Severity: high (CVSS 8.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-29 · updated 2026-10-01
- Weakness: CWE-287
Description
An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain unauthorized access to restricted networks.
Affected products
- Hewlett Packard Enterprise (HPE) Instant ON: from 0.0.0.0 through 3.4.1.0
References
Get alerted when CVE-2026-76726 or the next vulnerability affects your stack