CVE-2026-76731: Authentication Bypass in the Captive Portal of HPE Networking Instant On
Published Sep 29, 2026
·Updated
An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain limited access to some data and to make limited changes within the affected component.
Affected Software
1 affected component
HPE Networking Instant ON
Event History
Sep 29, 2026
CVE Published
via MITRE·07:28 PM
Data Sourced
via MITRE·07:28 PM
DescriptionSeverity
Data Sourced
via NVD·08:17 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker could exploit the authentication bypass in the captive portal. No prior privileges or user interaction are required according to the provided vector.
2
What impact could successful exploitation have?
Successful exploitation could let an attacker circumvent existing authentication controls, gain limited access to some data, and make limited changes within the affected component.