Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-76722 EUVD-2026-89341GHSA-6rfv-6396-m883

Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs

Published Sep 29, 2026 · Updated Oct 1, 2026 · Assigned by hpe

Description

Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation could result in a Denial-of-service or potential remote code execution.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Instant ON 0.0.0.0 – ≤ 3.4.1.0 —

References