Hewlett Packard Enterprise (HPE) Instant ON
20 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76738 | 0.0.0.0 – 3.4.1.0 | Authenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-Service | LOW 2.7 | 0.2 % | ||
| CVE-2026-76737 | 0.0.0.0 – 3.4.1.0 | Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On | LOW 3.0 | 0.1 % | ||
| CVE-2026-76736 | 0.0.0.0 – 3.4.1.0 | Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant On | LOW 3.3 | 0.1 % | ||
| CVE-2026-76735 | 0.0.0.0 – 3.4.1.0 | Authenticated Local Sensitive Information Disclosure in HPE Networking Instant On | MEDIUM 4.1 | 0.1 % | ||
| CVE-2026-76734 | 0.0.0.0 – 3.4.1.0 | Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in HPE Networking Instant On | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-76733 | 0.0.0.0 – 3.4.1.0 | Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint | MEDIUM 4.9 | 0.3 % | ||
| CVE-2026-76732 | 0.0.0.0 – 3.4.1.0 | Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ON | MEDIUM 6.4 | 0.1 % | ||
| CVE-2026-76731 | 0.0.0.0 – 3.4.1.0 | Authentication Bypass in the Captive Portal of HPE Networking Instant On | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-76730 | 0.0.0.0 – 3.4.1.0 | Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-76729 | 0.0.0.0 – 3.4.1.0 | Authenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API Endpoint | MEDIUM 6.6 | 0.4 % | ||
| CVE-2026-76728 | 0.0.0.0 – 3.4.1.0 | Authenticated Server-Side Request Forgery Leading to Remote Code Execution in HPE Networking Instant ON APs | HIGH 7.2 | 0.5 % | ||
| CVE-2026-76727 | 0.0.0.0 – 3.4.1.0 | Authenticated Command Injection Vulnerabilities in HPE Networking Instant ON | HIGH 7.2 | 1.0 % | ||
| CVE-2026-76726 | 0.0.0.0 – 3.4.1.0 | Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint | HIGH 8.1 | 0.4 % | ||
| CVE-2026-76725 | 0.0.0.0 – 3.4.1.0 | Authentication Bypass in a Management Protocol of HPE Networking Instant ON APs | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-76724 | 0.0.0.0 – 3.4.1.0 | Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PA… | CRITICAL 9.6 | 1.0 % | ||
| CVE-2026-76723 | 0.0.0.0 – 3.4.1.0 | Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APS | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-76722 | 0.0.0.0 – 3.4.1.0 | Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-76721 | 0.0.0.0 – 3.4.1.0 | Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs | CRITICAL 9.8 | 0.6 % | ||
| CVE-2025-37166 | 3.0.0.0 – 3.3.1.0 | Unexpected shutdown in HPE Instant On Access Points after processing specific packets | HIGH 7.5 | 0.5 % | ||
| CVE-2025-37165 | 3.0.0.0 – 3.3.1.0 | Exposure of VLAN information in unintended network interfaces | HIGH 7.5 | 0.4 % |