CVE-2026-76732

MediumCVSS 6.4/10Last modified Oct 1, 2026

Description

A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges if certain preconditions are met outside of the attacker's control.

Metrics

CVSS 3.1 6.4/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Hewlett Packard Enterprise (HPE)	Instant ON	>= 0.0.0.0, <= 3.4.1.0

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US

Timeline

Published: Sep 29, 2026
Last modified: Oct 1, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-767334.9A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with ad CVE-2026-767344.8A memory corruption vulnerability in the affected interface of HPE Networking Instant On could allow an unauthenticated remote attacker to c CVE-2026-767354.1A sensitive information disclosure vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploita CVE-2026-767363.3A buffer overflow vulnerability exists in the underlying operating system of HPE Networking Instant On. Successful exploitation could allow CVE-2026-767373.0An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation cou CVE-2026-767382.7A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with admi CVE-2026-767394.3A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploi CVE-2026-76748.8A flaw has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. This issue affects the function start_single_service of the c CVE-2026-767407.2A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be expl CVE-2026-767416.5Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attack CVE-2026-767429.8Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated CVE-2026-767439.8A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to