High severity8.6NVD Advisory· Published Sep 15, 2026· Updated Sep 28, 2026
CVE-2026-76679
CVE-2026-76679
Description
Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.
Affected products
5cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*range: >=9.4.0,<9.4.11
- cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*
cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*range: >=9.4.0.0,<9.4.9.0
- cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory
News mentions
1- HPE Aruba EdgeConnect: 20 Coordinated Vulnerabilities Threaten System CompromiseVypr Intelligence · Sep 15, 2026