CVE-2026-76732

Awaiting Analysis Awaiting Analysis - Queue

Local Privilege Escalation in HPE Networking Instant ON

Publication date: 2026-09-29

Last updated on: 2026-10-01

Assigner: Hewlett Packard Enterprise (HPE)

Description

A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met outside of the attacker's control.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-10-01

Generated

2026-10-19

AI Q&A

2026-09-29

EPSS Evaluated

2026-10-18

NVD

CVE-2026-76732

EUVD

EUVD-2026-89351

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_instant_on	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This is a local privilege-escalation vulnerability in the HPE Networking Instant ON daemon. If exploited successfully, it could let a local attacker run arbitrary code with root privileges. Exploitation depends on certain conditions outside the attacker's control.

Detection Guidance

This CVE describes a local privilege-escalation flaw in HPE Networking Instant On. Detection requires checking if the affected daemon is installed and running on the system. Inspect running processes for the vulnerable service using commands like 'ps aux | grep instant_on' or 'systemctl list-units --type=service | grep -i instant'. Verify installed packages with 'dpkg -l | grep hpe' (Debian/Ubuntu) or 'rpm -qa | grep hpe' (RHEL/CentOS). If the daemon is present, apply vendor patches immediately.

Impact Analysis

If exploited, this vulnerability could allow an attacker to gain full control over the affected system, potentially leading to unauthorized access, data theft, or system compromise. The impact depends on the attacker's access level and system configuration.

Compliance Impact

This vulnerability allows local attackers to gain root privileges, which could lead to unauthorized access to sensitive data. This may impact compliance with GDPR (data protection) and HIPAA (healthcare data privacy) by increasing the risk of data breaches or unauthorized disclosure.

Mitigation Strategies

Update the HPE Networking Instant ON daemon to the latest patched version immediately. Disable the affected daemon if updates are unavailable or apply temporary access restrictions until patches are applied.

Hi! I’m here to help you understand CVE-2026-76732. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70