Patch Forecast
Amber warning
Patch this week.

CVE-2026-76721

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that…

Risk score
73/100
CVSS
9.8 v3.1
Exploit chance (30 days)
0.6%
Published
29 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Amber

  • CVSS 9.8 critical
  • Remotely exploitable without logging in

References

Original description

Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on the underlying host. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.

Last activity 29 Sep 2026. Patch Forecast updates every hour.