CVE-2026-76732: Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ON
A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met outside of the attacker's control.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Exposure is limited to systems running the affected HPE Networking Instant ON daemon where an attacker already has local authenticated access with high privileges. Remote-only attackers are not described as being able to exploit it.
What must an attacker have to exploit the vulnerability?
The attacker needs local access, high privileges, and authentication. Exploitation also depends on certain preconditions outside the attacker’s control.
What is the potential impact if exploitation succeeds?
Successful exploitation could result in arbitrary code execution with root privileges, affecting confidentiality, integrity, and availability.