CVE-2026-76729: A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause…

PriorityP345medium6.6CVSS 3.1

AVNACHPRHUINSUCHIHAH

EPSS

0.42%

34.5th percentile

A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service condition or remote code execution in the affected system function.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
hewlett_packard_enterprise	instant_on	0.0.0.0 – 3.4.1.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.