CVE-2026-76732: Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ON

Severity: medium (CVSS 6.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-29 · updated 2026-10-01
Weakness: CWE-269

Description

A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met outside of the attacker's control.

Affected products

Hewlett Packard Enterprise (HPE) Instant ON: from 0.0.0.0 through 3.4.1.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US

Get alerted when CVE-2026-76732 or the next vulnerability affects your stack