---
id: CVE-2026-76723
title: >-
  Buffer overflow vulnerabilities exist in the affected interface of HPE
  Networking Instant ON APS that could allow an unauthenticated adjacent
  attacker to achieve remote code execution
summary: >-
  Buffer overflow vulnerabilities exist in the affected interface of HPE
  Networking Instant ON APS that could allow an unauthenticated adjacent
  attacker to achieve remote code execution. Successful exploitation could allow
  an attacker to e…
severity: critical
cvss: 9.6
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-120
vendor: Hewlett Packard Enterprise (HPE)
product: Instant ON
affected:
  - instant_on >= 0.0.0.0 <= 3.4.1.0
published: '2026-09-29'
updated: '2026-10-01'
sourceUpdated: '2026-10-01T04:18:19.613'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-76723'
references:
  - url: >-
      https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US
    label: security-alert@hpe.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-30T20:37:25.283162Z'
ingestedAt: '2026-09-29T19:44:04.157Z'
epss: 0.0031
epssPercentile: 0.2396
---

## Overview

Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.