CVE-2026-76734 is a memory corruption vulnerability in Hewlett Packard Enterprise (HPE) Instant ON networking product. It allows an unauthenticated remote attacker to cause a denial of service by disrupting normal service operation and potentially accessing limited information within the affected component. The vulnerability has a medium severity with a CVSS score of 4.8. It affects versions from 0.0.0.0 up to and including 3.4.1.0. No known exploits are reported in the wild, and no patch or remediation details are provided.
CVE-2026-76733 is a denial-of-service vulnerability in the API endpoint of Hewlett Packard Enterprise (HPE) Networking Instant On. It requires an authenticated attacker with administrative privileges to exploit. Successful exploitation causes a denial of service that interrupts normal operation but the service resumes automatically without manual intervention. The vulnerability affects versions up to and including 3.4.1.0. The CVSS score is 4.9, indicating medium severity.
CVE-2026-76732 is a local privilege-escalation vulnerability in the daemon component of Hewlett Packard Enterprise (HPE) Instant ON Networking devices. Exploiting this flaw could allow a local attacker with certain preconditions to execute arbitrary code with root privileges. The vulnerability affects versions from 0.0.0.0 up to and including 3.4.1.0. The CVSS v3.1 base score is 6.4, indicating a medium severity level. No vendor patch or official remediation details are provided, and there are no known exploits in the wild at this time.
CVE-2026-76731 is an authentication bypass vulnerability in the captive portal of Hewlett Packard Enterprise (HPE) Networking Instant On. It allows an unauthenticated remote attacker to circumvent authentication controls, potentially gaining limited access to some data and making limited changes within the affected component. The vulnerability affects versions up to and including 3.4.1.0. The CVSS 3.1 base score is 6.5, indicating a medium severity level.
CVE-2026-76730 is an authentication bypass vulnerability in the PAPI protocol of Hewlett Packard Enterprise (HPE) Instant ON Access Points. It allows an unauthenticated adjacent attacker to bypass authentication controls and send unauthorized network traffic to the device. The vulnerability affects versions from 0.0.0.0 up to and including 3.4.1.0. The CVSS score is 6.5, indicating a medium severity level. No known exploits are reported in the wild, and no official patch information is provided.
CVE-2026-76729 is a format string vulnerability in the API endpoint of Hewlett Packard Enterprise (HPE) Instant ON networking access points. It requires an authenticated attacker with high privileges to exploit. Successful exploitation could lead to memory corruption, potentially causing denial-of-service or remote code execution on the affected device. The vulnerability affects versions from 0.0.0.0 up to and including 3.4.1.0. The CVSS 3.1 base score is 6.6, indicating a medium severity level.
CVE-2026-76728 is a high-severity vulnerability in Hewlett Packard Enterprise (HPE) Instant ON networking access points. It involves an API endpoint susceptible to server-side request forgery (SSRF) attacks by authenticated users with high privileges. Exploiting this flaw could enable attackers to execute arbitrary commands with privileged access on the underlying operating system. The affected versions include all releases up to and including 3.4.1.0. No known exploits are reported in the wild, and no patch information is provided.
CVE-2026-76727 is a command injection vulnerability in Hewlett Packard Enterprise (HPE) Instant ON networking devices. It affects versions from 0.0.0.0 up to and including 3.4.1.0. An authenticated remote attacker with high privileges could exploit this flaw to execute arbitrary commands on the underlying operating system. The vulnerability has a high severity rating with a CVSS score of 7.2. No patch or vendor advisory information is provided regarding remediation status.
CVE-2026-76726 is an authentication bypass vulnerability in the API endpoint of Hewlett Packard Enterprise (HPE) Networking Instant ON. This flaw could allow an unauthenticated remote attacker to bypass network access controls if certain external preconditions are met. Exploitation may lead to unauthorized access to restricted networks. The vulnerability affects versions up to and including 3.4.1.0. It has a high severity rating with a CVSS score of 8.1. No official patch or remediation details are provided in the available data.
CVE-2026-76725 is a critical vulnerability in the management protocol of Hewlett Packard Enterprise (HPE) Instant ON Access Points. It allows an unauthenticated adjacent attacker to bypass authentication controls, potentially leading to remote code execution with elevated privileges. The vulnerability affects versions from 0.0.0.0 up to and including 3.4.1.0. The CVSS 3.1 base score is 9.6, indicating a high severity with network attack vector requiring adjacency, low attack complexity, no privileges or user interaction needed, and complete confidentiality, integrity, and availability impact.
CVE-2026-76724 is a critical command injection vulnerability in the CLI of Hewlett Packard Enterprise (HPE) Instant ON networking access points. An unauthenticated adjacent attacker can exploit this flaw by sending specially crafted packets, allowing arbitrary command execution with privileged user rights on the underlying operating system. The vulnerability affects versions up to and including 3.4.1.0. No known exploits are reported in the wild, and no patch information is currently provided.
CVE-2026-76723 is a critical buffer overflow vulnerability in Hewlett Packard Enterprise (HPE) Instant ON Networking APS. It allows an unauthenticated adjacent attacker to execute arbitrary commands on the underlying operating system, potentially leading to full system compromise. The vulnerability affects versions from 0.0.0.0 up to and including 3.4.1.0. There is no information provided about an available patch or vendor advisory. The CVSS score is 9.6, indicating a critical severity level.
CVE-2026-76722 is a critical uncontrolled format string vulnerability in Hewlett Packard Enterprise (HPE) Instant ON networking access points. It allows an unauthenticated remote attacker to execute arbitrary commands on the device, potentially causing denial of service or remote code execution. The vulnerability affects versions up to and including 3.4.1.0. No patch information is provided, and no known exploits are reported in the wild.
CVE-2026-76721 is a critical buffer overflow vulnerability in Hewlett Packard Enterprise (HPE) Instant ON networking product. It allows an unauthenticated remote attacker to execute arbitrary code with privileged operating system rights. The vulnerability affects versions from 0.0.0.0 up to and including 3.4.1.0. No patch information is provided, and no known exploits are reported in the wild.
CVE-2026-76717 is a medium severity vulnerability in Hewlett Packard Enterprise's Analytics and Location Engine (ALE) API. It allows an unauthenticated remote attacker to disclose sensitive information, including password hashes, by sending specially crafted input to a specific API endpoint. This vulnerability could facilitate further attacks if exploited. No known exploits are reported in the wild. The affected versions are from 0.0.0.0 up to and including 5.0.0.0. No patch or remediation information is currently provided.
Multiple vulnerabilities in Hewlett Packard Enterprise's Analytics and Location Engine (ALE) could allow unauthenticated remote attackers to cause denial of service or gain unauthorized access. These issues stem from improper security configurations and specially crafted inputs. The vulnerabilities affect ALE versions up to and including 5.0.0.0. The overall severity is medium with a CVSS score of 5.3.
CVE-2026-76715 is a high-severity vulnerability in Hewlett Packard Enterprise's Analytics and Location Engine (ALE) administrative component. It allows a man-in-the-middle (MitM) attack that could enable an unauthenticated remote attacker to execute arbitrary code with root privileges on the affected appliance. The vulnerability affects ALE versions from 0.0.0.0 up to and including 5.0.0.0. The CVSS score is 7.1, indicating a high impact on confidentiality, integrity, and availability. No patch or vendor advisory information is provided, and no known exploits are reported in the wild.