CVE-2026-76693

Analyzed Analyzed - Analysis Complete

Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

Publication date: 2026-09-15

Last updated on: 2026-09-28

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain services running on impacted Gateways.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-28

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76693

EUVD

EUVD-2026-79219

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability in HPE Networking EdgeConnect SD-WAN Gateways allows an unauthenticated remote attacker to disrupt certain services running on affected gateways, causing a denial-of-service condition.

Impact Analysis

The vulnerability could lead to service outages for networks relying on these gateways, disrupting connectivity and operations for users and systems dependent on the SD-WAN infrastructure.

Compliance Impact

This vulnerability could lead to disruption of services, potentially causing data processing delays or outages. While not directly violating GDPR or HIPAA, such disruptions may impact compliance by affecting data availability, integrity, or confidentiality requirements.

Mitigation Strategies

Apply patches or updates provided by HPE for the affected EdgeConnect SD-WAN Gateways to address the denial-of-service vulnerability. Monitor HPE's security advisories for further guidance.

Hi! I’m here to help you understand CVE-2026-76693. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70