Format String Vulnerability in HPE Networking Instant ON Access Points
CVE-2026-76729

6.6MEDIUM

Key Information:

Vendor

HP (HP)

Vendor
CVE Published:
29 September 2026

What is CVE-2026-76729?

A format string vulnerability has been identified in the API endpoint of HPE Networking Instant ON Access Points, which may be exploited by an authenticated remote attacker with elevated privileges. By providing specially crafted input, an attacker could trigger memory corruption in the affected system. This exploitation could result in a denial-of-service condition or potentially enable remote code execution, posing serious security risks. Users are advised to assess their systems for exposure to this vulnerability.

Affected Version(s)

Instant ON 0.0.0.0 <= 3.4.1.0

References

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.