CVEvulnerability

CVE-2026-76722

9.8 CRITICAL Published 2026-09-29 Modified 2026-10-01 Official page ↗
Status
Awaiting Analysis
Published
2026-09-29
Last modified
2026-10-01
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-134

Description

Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation could result in a Denial-of-service or potential remote code execution.

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References