CVE-2026-76728

Name of the Vulnerable Software and Affected Versions HPE Networking Instant ON APs (affected versions not specified)

Description A server-side request forgery (SSRF) issue exists in the API endpoint of the device. An authenticated remote attacker with high privileges can exploit this to execute arbitrary commands as a privileged user on the underlying operating system. SSRF is a flaw where an attacker induces the server to make requests to an unintended location.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.