Authentication Bypass Vulnerability in HPE Networking Instant ON
CVE-2026-76726

8.1HIGH

Key Information:

Vendor

HP (HP)

Status
Instant On
Vendor
CVE Published:
29 September 2026

What is CVE-2026-76726?

An authentication bypass vulnerability exists in the API endpoint of HPE Networking Instant ON, which potentially allows unauthenticated remote attackers to circumvent network access controls given certain conditions that are not controlled by the attacker. If exploited successfully, this vulnerability may enable unauthorized access to restricted network areas, putting sensitive data and resources at risk.

Affected Version(s)

Instant ON 0.0.0.0 <= 3.4.1.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.