9.6
Critical
CVE-2026-76724 A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an…
Description
A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command injection by sending specially crafted packets. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Instant On 0.0 | 0.0.0.0 → 3.4.1.0 | No fix stated |
Other CVEs of Instant On
The 20 CVEs of Instant On →
CVE-2026-76738
A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an…
2.7
Low
CVE-2026-76737
An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On
3.0
Low
CVE-2026-76736
A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On
3.3
Low
CVE-2026-76735
A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On
4.1
Medium