Log in Start free

Vulnerability · Published Sep 15, 2026 · Assigned by hpe

CVE-2026-76699Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

Medium 6.4

In plain English

A medium-severity buffer overflow in EdgeConnect SD-WAN Gateways from Hewlett Packard Enterprise (HPE). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).

Severity (CVSS 3.1)6.4Medium
Exploit odds (30 days)0.2%top 87.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted service and temporarily disrupting network operations.

Affected products (as reported)

VendorProductVersions
Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways 9.7.0.0 – through 9.7.0.09.6.0.0 – through 9.6.3.19.5.0.0 – through 9.5.8.19.4.0.0 – through 9.4.8.2

Weakness: CWE-120 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

References