CVE-2026-76696

Analyzed Analyzed - Analysis Complete

HPE Networking EdgeConnect SD-WAN Gateway DoS Vulnerability

Publication date: 2026-09-15

Last updated on: 2026-09-28

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-28

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76696

EUVD

EUVD-2026-79222

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability in HPE Networking EdgeConnect SD-WAN Gateways allows an unauthenticated attacker on the same network to cause a denial of service by crashing the system. The affected device cannot reboot automatically and requires manual intervention, disrupting network operations.

Impact Analysis

If exploited, this vulnerability could disrupt your network operations by crashing the SD-WAN gateway. This may lead to loss of connectivity, downtime for critical services, and require manual intervention to restore functionality.

Compliance Impact

This vulnerability could disrupt network operations by crashing the system, which may lead to unauthorized access or data breaches. Such disruptions could impact compliance with GDPR or HIPAA by compromising data integrity or availability.

Mitigation Strategies

Apply patches or updates provided by HPE for the EdgeConnect SD-WAN Gateways to address the denial of service vulnerability. Isolate affected systems from untrusted networks until patched. Monitor network traffic for unusual patterns indicating exploitation attempts.

Hi! I’m here to help you understand CVE-2026-76696. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70