CVE-2026-76726 — Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint

CVE-2026-76726

Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint PUBLISHED

Description (CNA)

An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain unauthorized access to restricted networks.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Instant ON	affected 0.0.0.0 through 3.4.1.0

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.