CVE-2026-76724

Received
Published: 29 Sept 2026, 19:28
Last modified:29 Sept 2026, 19:28

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.6 CRITICAL
v3.1 (cve.org)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Sept 2026, 19:28
Published
Vulnerability first disclosed

Description

A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection by sending specially crafted packets. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Systems

  • hewlett packard enterprise (hpe)•instant on

    ≥ 0.0.0.0, ≤ 3.4.1.0

References (1)