Skip to content
OpenAdvisories
Critical · 9.6 CVE-2026-76725 EUVD-2026-89344GHSA-377j-9995-vqp9

Authentication Bypass in a Management Protocol of HPE Networking Instant ON APs

Published Sep 29, 2026 · Updated Oct 1, 2026 · Assigned by hpe

Description

A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could result in a complete bypass of security restrictions, potentially leading to remote code execution with elevated privileges.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Instant ON 0.0.0.0 – ≤ 3.4.1.0 —

References