9.8
Critical
CVE-2026-76722 Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could…
Description
Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation could result in a Denial-of-service or potential remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Instant On 0.0 | 0.0.0.0 → 3.4.1.0 | No fix stated |
Other CVEs of Instant On
The 20 CVEs of Instant On →
CVE-2026-76738
A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an…
2.7
Low
CVE-2026-76737
An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On
3.0
Low
CVE-2026-76736
A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On
3.3
Low
CVE-2026-76735
A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On
4.1
Medium