7.2
High
CVE-2026-76727 Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an…
Description
Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Instant On 0.0 | 0.0.0.0 → 3.4.1.0 | No fix stated |
Other CVEs of Instant On
The 20 CVEs of Instant On →
CVE-2026-76738
A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an…
2.7
Low
CVE-2026-76737
An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On
3.0
Low
CVE-2026-76736
A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On
3.3
Low
CVE-2026-76735
A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On
4.1
Medium