CVE-2026-76725

Received
Published: 29 Sept 2026, 19:28
Last modified:29 Sept 2026, 19:28

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.6 CRITICAL
v3.1 (cve.org)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Sept 2026, 19:28
Published
Vulnerability first disclosed

Description

A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could result in a complete bypass of security restrictions, potentially leading to remote code execution with elevated privileges.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Systems

  • hewlett packard enterprise (hpe)•instant on

    ≥ 0.0.0.0, ≤ 3.4.1.0

References (1)