CVE-2026-76686

Analyzed Analyzed - Analysis Complete

Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

Publication date: 2026-09-15

Last updated on: 2026-09-28

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated remote attacker to conduct a denial-of-service attack on the affected service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-28

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76686

EUVD

EUVD-2026-79212

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a denial-of-service flaw in HPE Networking EdgeConnect SD-WAN Gateways. An unauthenticated remote attacker could exploit it to disrupt the affected service by causing it to crash or become unavailable.

Detection Guidance

Detection of this vulnerability requires monitoring for denial-of-service conditions on HPE Networking EdgeConnect SD-WAN Gateways. Check for unusual traffic patterns or service crashes on affected devices. No specific commands are provided in the available context.

Impact Analysis

If exploited, this vulnerability could lead to service outages for your SD-WAN Gateway, disrupting network connectivity and business operations. It does not allow data theft or unauthorized access but can severely impact network reliability.

Compliance Impact

This vulnerability could impact compliance with standards like GDPR and HIPAA by disrupting the availability of critical network services. A denial-of-service attack may lead to unauthorized data access or service unavailability, potentially violating availability requirements in these regulations.

Mitigation Strategies

Apply security patches or updates provided by HPE for the affected EdgeConnect SD-WAN Gateways. Isolate vulnerable systems from untrusted networks until patched. Monitor network traffic for unusual activity targeting the affected service.

Hi! I’m here to help you understand CVE-2026-76686. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70