CVE-2026-76699

EUVD-2026-79225
A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted service and temporarily disrupting network operations.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.4 MEDIUM
ADJACENT_NETWORK
HIGH
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 12.31%
Affected Products (NVD)
VendorProductVersion
arubanetworksedgeconnect_sd-wan_orchestrator
9.4.0 ≤
𝑥
< 9.4.11
arubanetworksedgeconnect_sd-wan_orchestrator
9.5.0 ≤
𝑥
< 9.5.9
arubanetworksedgeconnect_sd-wan_orchestrator
9.6.0 ≤
𝑥
< 9.6.4
arubanetworksedgeconnect_sd-wan_orchestrator
9.7.0
hpeedgeconnect_operating_system
9.4.0.0 ≤
𝑥
< 9.4.9.0
hpeedgeconnect_operating_system
9.5.0.0 ≤
𝑥
< 9.5.9.0
hpeedgeconnect_operating_system
9.6.0.0 ≤
𝑥
< 9.6.4.0
hpeedgeconnect_operating_system
9.7.0.0
𝑥
= Vulnerable software versions