401 matches found
PT-2026-102874
An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...
PT-2026-102870
šØ CVE-2026-76726 An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an...
PT-2026-102873
šØ CVE-2026-76729 A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service...
PT-2026-102878
A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service and to access so...
PT-2026-102877
A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected...
HPESBNW05150 rev.1 - Multiple Vulnerabilities in HPE Networking Instant On APs
Potential Security Impact: Local: Access Restriction Bypass, Escalation of Privilege; Remote: Access Restriction Bypass, Code Execution, Denial of Service DoS, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Networking Instant On Access Points...
PT-2026-102868
Name of the Vulnerable Software and Affected Versions HPE Networking Instant ON APs affected versions not specified Description A command injection issue exists in the CLI of the affected devices. An unauthenticated adjacent attacker can execute arbitrary commands as a privileged user on the...
CVE-2026-76728: Undefined Security Weakness
A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery SSRF attack. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the...
PT-2026-102866
Name of the Vulnerable Software and Affected Versions HPE Networking Instant ON APs affected versions not specified Description An uncontrolled format string issue exists in the affected interface, which could allow an unauthenticated remote attacker to execute arbitrary commands on the underlyin...
PT-2026-102879
A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow an authenticated local attacker with high privileges to retrieve information which could be used to potentially gain further access to netwo...
CVE-2026-76731: Improper Privilege Management
An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain limited access to some data and to make limited changes...
CVE-2026-76736: Improper Restriction of Operations within the Bounds of a Memory Buffer
A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...
CVE-2026-76725: Improper Authentication
A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could result in a complete bypass of security restrictions, potentially leadi...
PT-2026-102871
šØ CVE-2026-76727 Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a...
PT-2026-102875
An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain limited access to some data and to make limited changes...
PT-2026-102880
A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow a low-privilege authenticated local attacker to interrupt the normal operation of the affected service...
PT-2026-102882
Name of the Vulnerable Software and Affected Versions HPE Networking Instant On affected versions not specified Description A buffer overflow occurs in the API endpoint, which may allow an authenticated attacker with administrative privileges to trigger a denial of service. This condition can...
CVE-2026-76717
A vulnerability exists in the HPE Networking Analytics and Location Engine (ALE) API , allowing an unauthenticated remote attacker to disclose sensitive information. By providing specially crafted input to a specific API endpoint, an attacker can obtain sensitive user data, including password has...
CVE-2026-76717 Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (ALE)
A vulnerability exists in the Analytics and Location Engine ALE API that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input to a specific API endpoint. Successful exploitation could result...
CVE-2026-76717 Unauthenticated Remote Sensitive Information Disclosure Vulnerability in HPE Networking Analytics and Location Engine (ALE)
A vulnerability exists in the Analytics and Location Engine ALE API that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input to a specific API endpoint. Successful exploitation could result...