CVE-2026-76729
A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service condition or remote code execution in the affected system function.
- Published Sep 29, 2026
- CVSS 6.6 medium
- 0.4% chance of exploitation in the next 30 days (EPSS)