High
Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint
An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain unauthorized access to restricted networks.
Announced Group revision 1
Original source ↗CVE-2026-76726
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-76726
Instant ON
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Hewlett Packard Enterprise (HPE)",
"product": "Instant ON",
"versions": [
{
"status": "affected",
"version": "0.0.0.0",
"versionType": "semver",
"lessThanOrEqual": "3.4.1.0"
}
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-76726
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #5062 · Revision 1
- Added to Heist Feed
- Publisher date