VYPR
← All advisories
High severity7.1NVD Advisory· Published Sep 15, 2026· Updated Sep 28, 2026

CVE-2026-76692

CVE-2026-76692

Description

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory.

Affected products

5
  • Arubanetworks/Edgeconnect Sd Wan Orchestrator2 versions
    cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*range: >=9.4.0,<9.4.11
    • cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*
  • HPE/Edgeconnect Operating System2 versions
    cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*range: >=9.4.0.0,<9.4.9.0
    • cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*
  • HPE/Aruba Networking EdgeConnect SD-WAN Gatewaysllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

1