Command Injection Vulnerability in HPE Networking Instant ON
CVE-2026-76727

7.2HIGH

Key Information:

Vendor

HP (HP)

Status
Instant On
Vendor
CVE Published:
29 September 2026

What is CVE-2026-76727?

A command injection vulnerability exists in HPE Networking Instant ON that enables an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system. This vulnerability allows potential exploitation, which could compromise the integrity and confidentiality of the system. Users of affected versions must prioritize updates and implement security measures to mitigate risks associated with this vulnerability.

Affected Version(s)

Instant ON 0.0.0.0 <= 3.4.1.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.