VYPR
← All advisories
High severity8.1NVD Advisory· Published Sep 15, 2026· Updated Sep 28, 2026

CVE-2026-76685

CVE-2026-76685

Description

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful exploitation could result in a buffer overflow, potentially leading to remote code execution or denial-of-service.

Affected products

5
  • HPE/HPE Security Bulletinllm-fuzzy
  • Arubanetworks/Edgeconnect Sd Wan Orchestrator2 versions
    cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*range: >=9.4.0,<9.4.11
    • cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*
  • HPE/Edgeconnect Operating System2 versions
    cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*range: >=9.4.0.0,<9.4.9.0
    • cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.