{"schema":"threatline.record/2","record":{"id":"CVE-2026-76722","aliases":[],"summary":"Uncontrolled Format String Vulnerabilities lead to Remote Code Execution or Denial-of-Service in HPE Networking Instant ON APs","details":"Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation could result in a Denial-of-service or potential remote code execution.","categories":["Unclassified"],"product":"Instant ON","vendor":"Hewlett Packard Enterprise (HPE)","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-76722","source_modified_at":"2026-10-01T03:55:31.535Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Instant ON","vendor":"Hewlett Packard Enterprise (HPE)","versions":[{"lessThanOrEqual":"3.4.1.0","status":"affected","version":"0.0.0.0","versionType":"semver"}],"defaultStatus":"affected"}],"fixed_versions":[],"cvss":9.8,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.0054,"percentile":0.4463,"score_date":"2026-10-23"},"published_at":"2026-09-29T19:28:34.471Z","modified_at":"2026-10-01T03:55:31.535Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-76722","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-01T03:55:31.535Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-76722","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05150en_us&docLocale=en_US"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"total","assessed_at":"2026-09-30T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-01T03:55:31.535Z","content_hash":"ca5a164a3523363dbb4fb6834135f313842cd47bbb69ade0dbc6fe05d560d96f"}}