CVE-2026-76703

EUVD-2026-79229
A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with administrative access to cause a denial of service. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 32.18%
Affected Products (NVD)
VendorProductVersion
arubanetworksedgeconnect_sd-wan_orchestrator
9.4.0 ≤
𝑥
< 9.4.11
arubanetworksedgeconnect_sd-wan_orchestrator
9.5.0 ≤
𝑥
< 9.5.9
arubanetworksedgeconnect_sd-wan_orchestrator
9.6.0 ≤
𝑥
< 9.6.4
arubanetworksedgeconnect_sd-wan_orchestrator
9.7.0
hpeedgeconnect_operating_system
9.4.0.0 ≤
𝑥
< 9.4.9.0
hpeedgeconnect_operating_system
9.5.0.0 ≤
𝑥
< 9.5.9.0
hpeedgeconnect_operating_system
9.6.0.0 ≤
𝑥
< 9.6.4.0
hpeedgeconnect_operating_system
9.7.0.0
𝑥
= Vulnerable software versions