Skip to content
OpenAdvisories
Medium · 6.6 CVE-2026-76729 EUVD-2026-89348GHSA-wrm5-7wg3-q6g8

Authenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API Endpoint

Published Sep 29, 2026 · Updated Oct 1, 2026 · Assigned by hpe

Description

A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service condition or remote code execution in the affected system function.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Instant ON 0.0.0.0 – ≤ 3.4.1.0 —

References