{"id":"CVE-2026-76727","title":"Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection","summary":"Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an at…","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","vendor":"Hewlett Packard Enterprise (HPE)","product":"Instant ON","affected":["instant_on >= 0.0.0.0 <= 3.4.1.0"],"published":"2026-09-29","updated":"2026-09-29","sourceUpdated":"2026-09-29T21:39:02.570","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-76727","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US","label":"security-alert@hpe.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-29T19:44:04.156Z","slug":"CVE-2026-76727","body":"## Overview\n\nCommand injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}