Vulnerability · Published Sep 29, 2026 · Assigned by hpe
CVE-2026-76733Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint
Medium 4.9
In plain English
A medium-severity uncontrolled resource consumption in Instant ON from Hewlett Packard Enterprise (HPE). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Official description
A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service, which resumes without manual intervention.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | Instant ON | 0.0.0.0 – through 3.4.1.0 |
Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H