CVE-2026-76676

Analyzed Analyzed - Analysis Complete

Buffer Overflow in EdgeConnect SD-WAN Gateways

Publication date: 2026-09-15

Last updated on: 2026-09-28

Assigner: Hewlett Packard Enterprise (HPE)

Description

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-28

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76676

EUVD

EUVD-2026-79202

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow in EdgeConnect SD-WAN Gateways' operating system. It allows an unauthenticated attacker within the same network to execute arbitrary code if specific external conditions are met. Exploitation could lead to complete system compromise by running code with high privileges.

Detection Guidance

Detection of this vulnerability requires checking for buffer overflow conditions in EdgeConnect SD-WAN Gateways. Monitor system logs for unusual activity or crashes. Verify installed firmware versions against vendor advisories. Use network scanning tools to detect vulnerable CPEs like hpe edgeconnect_sd-wan_gateways.

Impact Analysis

An attacker could gain full control over the affected system, potentially stealing data, disrupting operations, or using the device as a foothold to attack other systems in the network. This requires the attacker to be on the same network segment as the vulnerable device.

Compliance Impact

The vulnerability allows arbitrary code execution as a privileged user on the underlying operating system, which could lead to complete system compromise. This may result in unauthorized access to sensitive data, violating compliance requirements under standards like GDPR and HIPAA that mandate strict data protection and access controls.

Mitigation Strategies

Apply vendor-provided patches or updates for EdgeConnect SD-WAN Gateways immediately. Isolate affected systems from untrusted networks. Monitor for unusual activity or unauthorized access attempts. Follow hardening guidelines for network devices to reduce attack surface.

Hi! I’m here to help you understand CVE-2026-76676. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70