VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Sep 15, 2026· Updated Sep 28, 2026

CVE-2026-76695

CVE-2026-76695

Description

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the integrity and availability of the affected service.

Affected products

5
  • Arubanetworks/Edgeconnect Sd Wan Orchestrator2 versions
    cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*range: >=9.4.0,<9.4.11
    • cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*
  • HPE/Edgeconnect Operating System2 versions
    cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*range: >=9.4.0.0,<9.4.9.0
    • cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*
  • HPE/Aruba Networking EdgeConnect SD-WAN Gatewaysllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

1