What’s Vulnerable › Vulnerabilities
CVE-2026-76733: Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint
- Severity: medium (CVSS 4.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-29 · updated 2026-09-30
- Weakness: CWE-400
Description
A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service, which resumes without manual intervention.
Affected products
- Hewlett Packard Enterprise (HPE) Instant ON: from 0.0.0.0 through 3.4.1.0
References
Get alerted when CVE-2026-76733 or the next vulnerability affects your stack