CVE-2026-76721: Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs
Published Sep 29, 2026
·Updated
Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.
Affected Software
1 affected component
HPE Networking Instant ON
Event History
Sep 29, 2026
CVE Published
via MITRE·07:28 PM
Data Sourced
via MITRE·07:28 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
No authentication or prior privileges are required. The issue is remotely exploitable over the network with low attack complexity and no user interaction.
2
What could successful exploitation allow?
A successful attacker could execute arbitrary code as a privileged user on the underlying operating system. This could compromise confidentiality, integrity, and availability of the affected host.