CVE-2026-76705
EUVD-2026-7923115.09.2026, 20:17
A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with Admin privilege to execute arbitrary commands on the underlying operating system.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.4.0 ≤ 𝑥 < 9.4.11 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.5.0 ≤ 𝑥 < 9.5.9 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.6.0 ≤ 𝑥 < 9.6.4 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.7.0 |
| hpe | edgeconnect_operating_system | 9.4.0.0 ≤ 𝑥 < 9.4.9.0 |
| hpe | edgeconnect_operating_system | 9.5.0.0 ≤ 𝑥 < 9.5.9.0 |
| hpe | edgeconnect_operating_system | 9.6.0.0 ≤ 𝑥 < 9.6.4.0 |
| hpe | edgeconnect_operating_system | 9.7.0.0 |
𝑥
= Vulnerable software versions