CVE-2026-76737

LOWCVSS 3.0

Description

An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of the affected service.

Timeline

Published:September 29th, 2026 8:17 PM

Last modified:September 30th, 2026 9:17 PM

CVSS Scoring

CVSS v3: 3.0 (LOW)

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L

Weaknesses (CWE)

CWE-22

References & Reports

Advisories, patches, and third-party reports

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US

Source: NIST NVD · Data may lag official sources by up to one minute