Known vulnerabilities in Hewlett Packard Enterprise (HPE) Instant On
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-76738 | A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an… | 2.7 Low | Sep 29, 2026 |
| CVE-2026-76737 | An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On | 3.0 Low | Sep 29, 2026 |
| CVE-2026-76736 | A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On | 3.3 Low | Sep 29, 2026 |
| CVE-2026-76735 | A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On | 4.1 Medium | Sep 29, 2026 |
| CVE-2026-76734 | A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an… | 4.8 Medium | Sep 29, 2026 |
| CVE-2026-76733 | A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an… | 4.9 Medium | Sep 29, 2026 |
| CVE-2026-76732 | A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON | 6.4 Medium | Sep 29, 2026 |
| CVE-2026-76731 | An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated… | 6.5 Medium | Sep 29, 2026 |
| CVE-2026-76730 | An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow… | 6.5 Medium | Sep 29, 2026 |
| CVE-2026-76729 | A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote… | 6.6 Medium | Sep 29, 2026 |
| CVE-2026-76728 | A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with… | 7.2 High | Sep 29, 2026 |
| CVE-2026-76727 | Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an… | 7.2 High | Sep 29, 2026 |
| CVE-2026-76726 | An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated… | 8.1 High | Sep 29, 2026 |
| CVE-2026-76725 | A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an… | 9.6 Critical | Sep 29, 2026 |
| CVE-2026-76724 | A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an… | 9.6 Critical | Sep 29, 2026 |
| CVE-2026-76723 | Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an… | 9.6 Critical | Sep 29, 2026 |
| CVE-2026-76722 | Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could… | 9.8 Critical | Sep 29, 2026 |
| CVE-2026-76721 | Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an… | 9.8 Critical | Sep 29, 2026 |
| CVE-2025-37166 | A vulnerability affecting HPE Networking Instant On Access Points has been identified where a device processing a… | 7.5 High | Jan 13, 2026 |
| CVE-2025-37165 | A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration… | 7.5 High | Jan 13, 2026 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
EdgeConnect SD-WAN Gateways 38
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
EdgeConnect SD-WAN Orchestrator 27
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
AOS-8 Instant and AOS-10 AP 18