CVE-2026-76726: Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint
Published Sep 29, 2026
·Updated
An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain unauthorized access to restricted networks.
Affected Software
1 affected component
HPE Networking Instant ON
Event History
Sep 29, 2026
CVE Published
via MITRE·07:28 PM
Data Sourced
via MITRE·07:28 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverity
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker can be remote and unauthenticated, but exploitation requires certain preconditions that are outside the attacker’s control. The available information does not specify what those preconditions are.
2
What is the potential impact of successful exploitation?
A successful attacker could bypass network access controls and gain unauthorized access to restricted networks. The stated impact includes high confidentiality, integrity, and availability consequences.