CVE-2026-76727
Awaiting Analysis Awaiting Analysis - Queue

Command Injection in HPE Networking Instant ON

Vulnerability report for CVE-2026-76727, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: Hewlett Packard Enterprise (HPE)

Description

Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-30
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe nw_instant_on *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a command injection flaw in HPE Networking Instant ON's interface. An authenticated remote attacker with high privileges can inject and execute arbitrary commands on the underlying operating system.

Impact Analysis

An attacker could gain control of the affected system, execute malicious commands, and potentially compromise sensitive data or disrupt network operations. This requires high-privilege access.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating compliance requirements such as GDPR or HIPAA, which mandate strict data protection and access controls.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for the affected HPE Networking Instant ON interface. Restrict high-privilege access to the interface and monitor network traffic for suspicious activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76727. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart