CVE-2026-76733

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in HPE Networking Instant On

Publication date: 2026-09-29

Last updated on: 2026-09-30

Assigner: Hewlett Packard Enterprise (HPE)

Description

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service, which resumes without manual intervention.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-30

Generated

2026-10-19

AI Q&A

2026-09-29

EPSS Evaluated

2026-10-18

NVD

CVE-2026-76733

EUVD

EUVD-2026-89352

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_instant_on	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a denial-of-service vulnerability in the API endpoint of HPE Networking Instant On. An authenticated attacker with admin privileges could exploit it to disrupt the service, causing it to stop functioning temporarily without requiring manual restart.

Detection Guidance

This vulnerability requires administrative access to exploit and causes a denial of service in HPE Networking Instant On's API endpoint. Detection may involve monitoring for unusual API traffic patterns or service interruptions from authenticated admin sessions. Check HPE Networking Instant On logs for failed or excessive API requests from admin accounts.

Impact Analysis

If exploited, it could interrupt the normal operation of your HPE Networking Instant On service, leading to downtime and potential loss of network functionality until the service automatically recovers.

Compliance Impact

The vulnerability allows an authenticated attacker with administrative privileges to cause a denial of service, disrupting the affected service. This could impact compliance with standards like GDPR or HIPAA by potentially interrupting critical data processing or access controls, though specific compliance impacts depend on system configuration and usage.

Mitigation Strategies

Immediately restrict administrative access to the HPE Networking Instant On API endpoint to only trusted users. Monitor network traffic for unusual activity targeting the API. Apply any available patches or updates from HPE as soon as they are released.

Hi! I’m here to help you understand CVE-2026-76733. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70