CVE-2026-76721

Awaiting Analysis Awaiting Analysis - Queue

Buffer Overflow in HPE Networking Instant ON

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: Hewlett Packard Enterprise (HPE)

Description

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-29

Generated

2026-09-30

AI Q&A

2026-09-30

EPSS Evaluated

N/A

NVD

CVE-2026-76721

EUVD

EUVD-2026-89340

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	nw_instant_on	*
hpe	networking_instant_on	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a buffer overflow vulnerability in HPE Networking Instant ON's interface. An unauthenticated remote attacker could exploit it to run arbitrary code on the host system with privileged user permissions.

Impact Analysis

An attacker could take full control of the affected system, install malware, steal data, or disrupt operations. Since it requires no authentication, any exposed device is at immediate risk.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR's data protection requirements and HIPAA's security rules for protected health information.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for Networking Instant ON devices as soon as possible. Isolate affected systems from untrusted networks until patched. Monitor vendor advisories for additional mitigation guidance.

Hi! I’m here to help you understand CVE-2026-76721. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70