CVE-2026-76737 — Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On

CVE-2026-76737

Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On PUBLISHED

Description (CNA)

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of the affected service.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / Instant ON	affected 0.0.0.0 through 3.4.1.0

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.