CVE-2026-76731CWE-269privilege-escalation

CVE-2026-76731

Medium · published September 30, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain limited access to some data and to make limited changes within the affected component.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-09-30T00:17Z
References (1)
EPSS history
Timeline
  • 01 OCT 03:49Z
    EPSS moved — → 0%
    epss
  • 29 SEP 19:28Z
    Authentication Bypass in the Captive Portal of HPE Networking Instant On
    cvelistv5