AI analysis
CVE-2026-76723 is a critical buffer overflow in an interface on HPE Networking Instant On access points. An unauthenticated attacker on an adjacent network can trigger the flaw without user interaction and run arbitrary commands on the AP operating system, with high impact to confidentiality, integrity, and availability and a changed scope. Successful exploitation yields remote code execution on the underlying OS of the affected access point. Deployments of HPE Instant On APs are affected; the CVE data does not name specific firmware versions or models. It is not listed in CISA KEV and no public proof-of-concept is known.
What to do: Apply the HPE Networking Instant On firmware update that addresses CVE-2026-76723 as soon as HPE publishes it for your AP models, and confirm the installed build after upgrade. Until then, keep management and the affected interface off untrusted adjacent networks (guest, IoT, and contractor VLANs), restrict L2 reachability to the APs, and watch for unexpected processes or configuration changes on the devices. No fixed version range is stated in the CVE data, so match models and builds to the vendor advisory rather than assuming a cutoff.
Affected
| Hewlett Packard Enterprise (HPE) Networking Instant On access points (APs) | — |
Estimated exposure
largeOrder-of-magnitude: likely tens of thousands to low hundreds of thousands of deployed APs (exact count unpublished) — Instant On is a widely sold SMB Wi-Fi access-point line, so a large installed base is plausible, but the advisory gives no install or scan counts; the CVSS adjacent vector further limits impact to devices reachable on a local or adjacent…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.