CVE-2026-76726CWE-287

CVE-2026-76726

High · published September 30, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
28.8
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain unauthorized access to restricted networks.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00362 · 28.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2026-09-30T00:17Z
References (1)
EPSS history
Timeline
  • 01 OCT 03:49Z
    EPSS moved — → 0%
    epss
  • 29 SEP 19:28Z
    Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint
    cvelistv5