CVE-2026-76692

Analyzed Analyzed - Analysis Complete

Unauthenticated Memory Disclosure and DoS in HPE EdgeConnect SD-WAN

Publication date: 2026-09-15

Last updated on: 2026-09-28

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-28

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76692

EUVD

EUVD-2026-79218

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability in HPE Networking EdgeConnect SD-WAN Gateways allows an unauthenticated attacker within the same network to access limited information from memory and disrupt the service. It may cause a denial of service by crashing the system or expose uninitialized stack memory.

Impact Analysis

If exploited, this vulnerability could lead to service disruption, causing network outages or reduced performance. It may also expose sensitive memory contents, potentially leaking confidential information.

Compliance Impact

This vulnerability could lead to unauthorized memory access, potentially violating data protection requirements under GDPR or HIPAA by exposing sensitive information. Organizations may face compliance risks if exploited.

Mitigation Strategies

Apply security patches or updates provided by HPE for the EdgeConnect SD-WAN Gateways to address the vulnerability. Isolate affected systems from untrusted networks and monitor for unusual activity. Review network traffic for signs of exploitation attempts.

Hi! I’m here to help you understand CVE-2026-76692. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70