CVE-2026-76722 — Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Insta…

CVE-2026-76722

Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs PUBLISHED

Description (CNA)

Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation could result in a Denial-of-service or potential remote code execution.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Instant ON	affected 0.0.0.0 through 3.4.1.0

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.