# Hewlett Packard Enterprise (HPE) Instant ON.

Every CVE that names Hewlett Packard Enterprise (HPE) Instant ON among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Authenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-Service](https://agentprime.io/advisories/CVE-2026-76738.md)
  `CVE-2026-76738` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 2.7 Low · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On](https://agentprime.io/advisories/CVE-2026-76737.md)
  `CVE-2026-76737` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 3.0 Low · Not analysed yet · Published 29 Sept 2026 · Tags: Path traversal
- [Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking Instant On](https://agentprime.io/advisories/CVE-2026-76736.md)
  `CVE-2026-76736` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 3.3 Low · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Authenticated Local Sensitive Information Disclosure in HPE Networking Instant On](https://agentprime.io/advisories/CVE-2026-76735.md)
  `CVE-2026-76735` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 4.1 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Information disclosure
- [Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in HPE Networking Instant On](https://agentprime.io/advisories/CVE-2026-76734.md)
  `CVE-2026-76734` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 4.8 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint](https://agentprime.io/advisories/CVE-2026-76733.md)
  `CVE-2026-76733` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 4.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service
- [Authenticated Local Privilege Escalation Vulnerability in a Daemon of HPE Networking Instant ON](https://agentprime.io/advisories/CVE-2026-76732.md)
  `CVE-2026-76732` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 6.4 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Privilege escalation
- [Authentication Bypass in the Captive Portal of HPE Networking Instant On](https://agentprime.io/advisories/CVE-2026-76731.md)
  `CVE-2026-76731` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Privilege escalation
- [Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs](https://agentprime.io/advisories/CVE-2026-76730.md)
  `CVE-2026-76730` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 6.5 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Authenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API Endpoint](https://agentprime.io/advisories/CVE-2026-76729.md)
  `CVE-2026-76729` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 6.6 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Authenticated Server-Side Request Forgery Leading to Remote Code Execution in HPE Networking Instant ON APs](https://agentprime.io/advisories/CVE-2026-76728.md)
  `CVE-2026-76728` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 7.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Authenticated Command Injection Vulnerabilities in HPE Networking Instant ON](https://agentprime.io/advisories/CVE-2026-76727.md)
  `CVE-2026-76727` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 7.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [Authentication Bypass Leading to Unauthorized Network Access in HPE Networking Instant ON API Endpoint](https://agentprime.io/advisories/CVE-2026-76726.md)
  `CVE-2026-76726` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 8.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Authentication Bypass in a Management Protocol of HPE Networking Instant ON APs](https://agentprime.io/advisories/CVE-2026-76725.md)
  `CVE-2026-76725` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Authentication bypass
- [Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol](https://agentprime.io/advisories/CVE-2026-76724.md)
  `CVE-2026-76724` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking Instant ON APS](https://agentprime.io/advisories/CVE-2026-76723.md)
  `CVE-2026-76723` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs](https://agentprime.io/advisories/CVE-2026-76722.md)
  `CVE-2026-76722` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in HPE Networking Instant ON APs](https://agentprime.io/advisories/CVE-2026-76721.md)
  `CVE-2026-76721` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption
- [Unexpected shutdown in HPE Instant On Access Points after processing specific packets](https://agentprime.io/advisories/CVE-2025-37166.md)
  `CVE-2025-37166` · CVE record: Hewlett Packard Enterprise (HPE) Instant On · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Denial of service
- [Exposure of VLAN information in unintended network interfaces](https://agentprime.io/advisories/CVE-2025-37165.md)
  `CVE-2025-37165` · CVE record: Hewlett Packard Enterprise (HPE) Instant On · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=hewlett-packard-enterprise-hpe-instant-on>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/hewlett-packard-enterprise-hpe-instant-on/>. Everything for agents: <https://agentprime.io/llms.txt>.