CVE-2026-76725

Awaiting Analysis Awaiting Analysis - Queue

Authentication Bypass in HPE Networking Instant ON APs

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could result in a complete bypass of security restrictions, potentially leading to remote code execution with elevated privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-29

Generated

2026-09-30

AI Q&A

2026-09-30

EPSS Evaluated

N/A

NVD

CVE-2026-76725

EUVD

EUVD-2026-89344

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_instant_on_aps	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the management protocol of HPE Networking Instant ON APs. It allows an unauthenticated attacker within close network proximity to bypass authentication controls. If exploited, it could completely bypass security restrictions and enable remote code execution with elevated privileges.

Impact Analysis

An attacker could gain unauthorized access to your network devices, execute malicious code, and take control of the affected systems. This may lead to data breaches, network disruption, or further compromise of connected systems.

Mitigation Strategies

Apply the latest firmware update provided by HPE to patch the authentication bypass vulnerability in Instant ON APs. Isolate affected devices from critical network segments until patched. Monitor network traffic for unusual activity or unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-76725. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70