CVE-2026-76674

critical · 9.8

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

9.8

CVSS

1.0%

EPSS (exploit prob.)

63rd

EPSS percentile

2026-09-15

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

Affected products

Vendor	Product	Affected versions
arubanetworks	edgeconnect_sd-wan_orchestrator	>= 9.4.0, < 9.4.11
arubanetworks	edgeconnect_sd-wan_orchestrator	>= 9.5.0, < 9.5.9
arubanetworks	edgeconnect_sd-wan_orchestrator	>= 9.6.0, < 9.6.4
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	>= 9.4.0.0, < 9.4.9.0
hpe	edgeconnect_operating_system	>= 9.5.0.0, < 9.5.9.0
hpe	edgeconnect_operating_system	>= 9.6.0.0, < 9.6.4.0
hpe	edgeconnect_operating_system	9.7.0.0

Check a specific version with /api/v1/cve/match.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-76674