{"id":"CVE-2026-76737","revision":"feddda6f35c94d2c953914836f6c8ee2","records":[{"revision":"feddda6f35c94d2c953914836f6c8ee2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-76737","aliases":[],"title":"Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On","description":"An authenticated path traversal vulnerability exists in the command line interface of HPE Networking Instant On. Successful exploitation could allow an attacker with administrative access to modify a limited set of files on the underlying operating system and to interrupt the normal operation of the affected service.","state":0,"publishedAt":"2026-09-29T19:28:56.78+00:00","modifiedAt":"2026-09-30T20:01:03.908+00:00","affected":[{"ecosystem":"Vendor product","name":"Instant ON","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"affected\",\n                    \"product\": \"Instant ON\",\n                    \"vendor\": \"Hewlett Packard Enterprise (HPE)\",\n                    \"versions\": [\n                        {\n                            \"lessThanOrEqual\": \"3.4.1.0\",\n                            \"status\": \"affected\",\n                            \"version\": \"0.0.0.0\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L","score":3,"severity":"LOW"}],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-76737","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-76737","identifiers":["CVE-2026-76737"]},"retained":false,"historicalAffected":[]}],"coverage":[]}