CVE-2026-76735

Awaiting Analysis Awaiting Analysis - Queue

Sensitive Information Disclosure in HPE Networking Instant On OS

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: Hewlett Packard Enterprise (HPE)

Description

A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an authenticated local attacker with high privileges to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking Instant On, only if certain preconditions outside of the attacker's control are met.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-29

Generated

2026-09-30

AI Q&A

2026-09-30

EPSS Evaluated

N/A

NVD

CVE-2026-76735

EUVD

EUVD-2026-89354

Affected Vendors & Products

Vendor	Product	Version / Range
hpe	networking_instant_on	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a sensitive information disclosure vulnerability in HPE Networking Instant On's operating system. An authenticated local attacker with high privileges could exploit it to retrieve sensitive data. Exploitation requires specific preconditions outside the attacker's control.

Impact Analysis

If exploited, this vulnerability could allow an attacker to access sensitive information that might help them gain further access to network services supported by HPE Networking Instant On. The impact depends on the sensitivity of the disclosed data.

Mitigation Strategies

Apply the latest security patches provided by HPE for HPE Networking Instant On. Ensure only trusted users have high-privilege access to the system. Monitor network traffic for unusual activity that may indicate exploitation attempts.

Hi! I’m here to help you understand CVE-2026-76735. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70