CVE-2026-76727: falha de alta gravidade em Hewlett Packard Enterprise (HPE) Instant ON
Authenticated Command Injection Vulnerabilities in HPE Networking Instant ON
Publicada em · Atualizada em
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 1.0%
probabilidade de exploração
1.0%top 39% das CVEs
exploração observada
nãonenhuma fonte reporta
Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Hewlett Packard Enterprise (HPE) · Instant ONCVEs relacionadas — Hewlett Packard Enterprise (HPE) Instant ON
No mesmo produto, das mais perigosas para as menos.
CVE-2026-76724CRITICALUnauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI ProtocolEPSS 1.0%CVE-2026-76721CRITICALUnauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APsEPSS 0.6%CVE-2026-76722CRITICALUncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APsEPSS 0.5%CVE-2026-76728HIGHAuthenticated Server-Side Request Forgery Leading to Remote Code Execution in HPE Networking Instant ON APsEPSS 0.5%CVE-2026-76729MEDIUMAuthenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API EndpointEPSS 0.4%CVE-2026-76726HIGHAuthentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API EndpointEPSS 0.4%