Authentication Bypass Vulnerability in HPE Networking Instant ON APs
CVE-2026-76730

6.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
Instant On
Vendor
CVE Published:
29 September 2026

What is CVE-2026-76730?

An authentication bypass vulnerability has been identified in the PAPI protocol of HPE Networking Instant ON APs, allowing an unauthenticated adjacent attacker to break existing authentication controls. This exploit can lead to unauthorized network traffic being sent to the device, which poses significant risks to network integrity and security. It is crucial for organizations using these devices to assess their exposure and implement necessary security measures to mitigate potential attacks.

Affected Version(s)

Instant ON 0.0.0.0 <= 3.4.1.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.