Unauthenticated Remote Disclosure in HPE Networking Switches
CVE-2026-44877

6.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
HP Networking Instant On
Vendor
CVE Published:
7 July 2026

What is CVE-2026-44877?

An unauthenticated remote disclosure vulnerability has been discovered in HPE Networking Instant On Switches, specifically affecting the 1830, 1930, and 1960 models. This vulnerability enables a remote threat actor to exploit the system, potentially gaining access to sensitive cryptographic secrets without needing authentication. As a result, affected devices may be at risk of unauthorized information exposure, emphasizing the importance of securing network configurations and monitoring for any unauthorized access attempts.

Affected Version(s)

HPE Networking Instant On Switch Model 1830 3.0.0 <= 3.3.3

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aaron P. Davis
.