CVE-2026-76731

published 2026-09-29

CVE-2026-76731: An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing…

Priority P3 47 medium 6.5 CVSS 3.1

AV N AC L PR N UI N S U C L I L A N

An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain limited access to some data and to make limited changes within the affected component.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
hewlett_packard_enterprise	instant_on	0.0.0.0 – 3.4.1.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269