{"api_version":"v1","generated_at":"2026-10-09T23:00:00+00:00","product":{"cve_count":18,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-hewlett-packard-enterprise-hpe-instant-on-2c8f4d52e291","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Instant ON","next_cursor":null,"observations":[{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76738","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76738","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-09-30T12:34:41.976Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:58.533Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76737","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76737","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-09-30T20:01:03.908Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:56.780Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76736","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76736","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-09-30T20:01:04.044Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:54.745Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76735","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76735","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-09-30T20:01:04.226Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:53.320Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76734","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76734","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-09-30T20:11:05.942Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:52.406Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76733","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76733","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-09-30T20:11:06.066Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:51.090Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76732","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76732","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-10-01T03:55:37.989Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:49.688Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76731","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76731","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-09-30T20:11:06.320Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:47.642Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76730","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76730","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-09-30T20:18:49.616Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:46.184Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76729","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76729","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-10-01T03:55:37.299Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:45.157Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76728","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76728","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-10-06T13:10:41.206Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:43.201Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76727","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76727","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-10-01T03:55:35.894Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:41.791Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76726","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76726","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-10-01T03:55:34.454Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:40.357Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76725","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76725","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-10-01T03:55:33.715Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:39.375Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76724","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76724","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-10-01T03:55:32.992Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:37.681Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76723","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76723","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-10-01T03:55:32.267Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:35.968Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76722","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76722","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-10-01T03:55:31.535Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:34.471Z"},{"affected":"Instant ON: 0.0.0.0 \u2264 3.4.1.0","affected_versions_present":true,"cve_id":"CVE-2026-76721","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76721","fixed":"In order to address the vulnerabilities described in the Details Section, HPE Networking recommends upgrading the HPE Networking Instant ON APs software to the following version (as applicable): - Instant ON 3.4.2.0 and above. Software versions with resolution/fixes for the disclosed vulnerabilities will be applied to the affected APs automatically by the Instant On cloud management portal. Product software versions that have reached End of Maintenance (EoM) are presumed to be affected by the vulnerabilities unless explicitly stated otherwise, and are not completely addressed by this security advisory. For deployments running software versions that are past End of Support (EoST), HPE Networking has not assessed exposure to the vulnerabilities referenced in this advisory. As a result, such installations should be considered potentially impacted by the listed CVE. Customers are strongly encouraged to upgrade to a supported software release to ensure proper evaluation and remediation.","last_modified":"2026-09-30T20:11:06.823Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-09-29T19:28:33.479Z"},{"affected":"3.0.0.0 \u2264 3.3.1.0","affected_versions_present":true,"cve_id":"CVE-2025-37166","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-37166","fixed":"Upgrade to HPE Networking Instant On software version 3.3.2.0 and above. Please note that Instant On devices started updating automatically during the week of December 10, 2025. No action is required from customers for this to occur, but manual upgrades may be triggered via the Instant On app or web portal after the release date. Note: These vulnerabilities only affect HPE Networking Instant On Access Points only. HPE Networking Instant On Switches are not affected. HPE Aruba Networking does not evaluate or patch software branches that have reached their End of Support Life (EoSL) milestone. For more information about HPE Aruba Networking products End of Support policy visit: https://www.hpe.com/psnow/doc/a00143052enw","last_modified":"2026-05-10T13:24:33.923Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-01-13T17:42:09.716Z"},{"affected":"3.0.0.0 \u2264 3.3.1.0","affected_versions_present":true,"cve_id":"CVE-2025-37165","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-37165","fixed":"Upgrade to HPE Networking Instant On software version 3.3.2.0 and above. Please note that Instant On devices started updating automatically during the week of December 10, 2025. No action is required from customers for this to occur, but manual upgrades may be triggered via the Instant On app or web portal after the release date. Note: These vulnerabilities only affect HPE Networking Instant On Access Points only. HPE Networking Instant On Switches are not affected. HPE Aruba Networking does not evaluate or patch software branches that have reached their End of Support Life (EoSL) milestone. For more information about HPE Aruba Networking products End of Support policy visit: https://www.hpe.com/psnow/doc/a00143052enw","last_modified":"2026-03-02T17:38:10.996Z","patch_url":"https://csaf.arubanetworking.hpe.com/","primary_source":"","published":"2026-01-13T17:40:56.557Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Hewlett Packard Enterprise (HPE)"}}