CVE-2026-76722
Awaiting Analysis Awaiting Analysis - Queue

Format String Vulnerability in HPE Networking Instant ON APs

Vulnerability report for CVE-2026-76722, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: Hewlett Packard Enterprise (HPE)

Description

Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation could result in a Denial-of-service or potential remote code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-30
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe nw_instant_on *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an uncontrolled format string issue in HPE Networking Instant ON APs. It allows an unauthenticated remote attacker to execute arbitrary commands on the device by exploiting format string flaws in the interface. This could lead to denial-of-service or remote code execution on the underlying host system.

Impact Analysis

If exploited, this vulnerability could allow attackers to take control of your network access points, disrupt services with a denial-of-service, or run malicious code on your devices. This could compromise network integrity, expose sensitive data, or enable further attacks within your network.

Mitigation Strategies

Apply the latest firmware update provided by HPE to patch the uncontrolled format string vulnerability in the affected interface of HPE Networking Instant ON APs. Isolate vulnerable devices from untrusted networks until patched. Monitor network traffic for signs of exploitation attempts targeting the vulnerable interface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76722. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart