CVE-2026-76723: Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APS
Published Sep 29, 2026
·Updated
Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Affected Software
1 affected component
HPE Networking Instant On APs
Event History
Sep 29, 2026
CVE Published
via MITRE·07:28 PM
Data Sourced
via MITRE·07:28 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverity
Frequently Asked Questions
1
Who is realistically exposed to exploitation?
HPE Networking Instant On APs with the affected interface exposed to an adjacent attacker are at risk. The attack vector is adjacent, so the attacker must be on a network segment or otherwise in proximity that provides access to that interface.
2
Does an attacker need credentials or user interaction?
No. The vulnerability is unauthenticated and requires no privileges or user interaction.
3
What could successful exploitation allow?
An attacker could achieve remote code execution and execute arbitrary commands on the AP's underlying operating system.