CVE-2026-76721CWE-119

CVE-2026-76721

Critical · published September 30, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
45.6
In the wild
Unconfirmed
What it is

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00556 · 45.6th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2026-09-30T00:17Z
References (1)
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US · [email protected]
EPSS history
Timeline
  • 01 OCT 03:49Z
    EPSS moved — → 1%
    epss
  • 29 SEP 19:28Z
    Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs
    cvelistv5