Buffer Overflow Vulnerability in HPE Networking Instant On
CVE-2026-76738

2.7LOW

Key Information:

Vendor

HP (HP)

Status
Instant On
Vendor
CVE Published:
29 September 2026

What is CVE-2026-76738?

A buffer overflow vulnerability has been identified in the API endpoint of HPE Networking Instant On. This flaw allows authenticated attackers with administrative privileges to potentially disrupt the normal operation of the affected service. The exploitation can lead to a denial of service, affecting network stability. Fortunately, the service can recover without manual intervention after an incident. Organizations using HPE Networking Instant On should ensure they are aware of this vulnerability and consider the necessary mitigations.

Affected Version(s)

Instant ON 0.0.0.0 <= 3.4.1.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.