CVE-2026-76726

Awaiting Analysis Awaiting Analysis - Queue

Authentication Bypass in HPE Networking Instant ON API

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: Hewlett Packard Enterprise (HPE)

Description

An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain unauthorized access to restricted networks.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-29

Generated

2026-09-30

AI Q&A

2026-09-30

EPSS Evaluated

N/A

NVD

CVE-2026-76726

EUVD

EUVD-2026-89345

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_instant_on	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is an authentication bypass vulnerability in HPE Networking Instant ON's API endpoint. It allows an unauthenticated remote attacker to bypass network access controls if certain external conditions are met. Successful exploitation could grant unauthorized access to restricted networks.

Impact Analysis

An attacker could exploit this to gain unauthorized access to your network, potentially leading to data breaches, unauthorized network activity, or further compromise of connected systems.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements for GDPR, HIPAA, and other regulations that mandate strict access controls and data protection.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for the Networking Instant ON API endpoint to address the authentication bypass vulnerability.

Hi! I’m here to help you understand CVE-2026-76726. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70