CVE-2026-76729
Awaiting Analysis Awaiting Analysis - Queue

Format String Vulnerability in HPE Networking Instant ON APs

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: Hewlett Packard Enterprise (HPE)

Description
A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service condition or remote code execution in the affected system function.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-30
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
CVE-2026-76729
EUVD
EUVD-2026-89348

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hpe networking_instant_on *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a format string vulnerability in the API endpoint of HPE Networking Instant ON APs. An authenticated remote attacker with high privileges can exploit it by sending modified input to cause memory corruption. This could lead to a denial-of-service condition or remote code execution in the affected system.

Impact Analysis

If exploited, this vulnerability could allow an attacker to crash the system, causing a denial-of-service. In severe cases, it may enable remote code execution, potentially giving the attacker control over the affected device.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for the affected HPE Networking Instant ON APs to address the format string vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76729. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart