Path Traversal Vulnerability in HPE Networking Instant On
CVE-2026-76737

3LOW

Key Information:

Vendor

HP (HP)

Status
Instant On
Vendor
CVE Published:
29 September 2026

What is CVE-2026-76737?

An authenticated path traversal vulnerability affects the command line interface of HPE Networking Instant On. When exploited, this vulnerability allows an authenticated attacker with administrative privileges to manipulate specific files on the underlying operating system, potentially disrupting the normal operations of the service. This flaw highlights the importance of proper input validation and securing command-line interfaces to prevent unauthorized file access.

Affected Version(s)

Instant ON 0.0.0.0 <= 3.4.1.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.