CVE-2026-76730

Awaiting Analysis Awaiting Analysis - Queue

Authentication Bypass in HPE Networking Instant ON APs via PAPI Protocol

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: Hewlett Packard Enterprise (HPE)

Description

An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication mechanisms and send unauthorized network traffic to the target device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-29

Generated

2026-09-30

AI Q&A

2026-09-30

EPSS Evaluated

N/A

NVD

CVE-2026-76730

EUVD

EUVD-2026-89349

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_instant_on_aps	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is an authentication bypass in the PAPI protocol of HPE Networking Instant ON APs. It allows an unauthenticated attacker within the same network to bypass authentication controls and send unauthorized network traffic to the device.

Impact Analysis

An attacker could exploit this to send unauthorized traffic to your device, potentially gaining access to sensitive network resources or disrupting network operations. The impact includes unauthorized network activity but does not directly expose data or cause system crashes.

Mitigation Strategies

Update the PAPI protocol firmware on HPE Networking Instant ON APs to the latest patched version. Disable unnecessary network services and restrict access to the device via network segmentation. Monitor network traffic for unauthorized activity.

Hi! I’m here to help you understand CVE-2026-76730. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70