CVE-2026-76699

Analyzed Analyzed - Analysis Complete

Buffer Overflow in HPE Networking EdgeConnect SD-WAN Gateway

Publication date: 2026-09-15

Last updated on: 2026-09-28

Assigner: Hewlett Packard Enterprise (HPE)

Description

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted service and temporarily disrupting network operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-28

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76699

EUVD

EUVD-2026-79225

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This is a buffer overflow vulnerability in the system service of HPE Networking EdgeConnect SD-WAN Gateways. An unauthenticated attacker within the same network could exploit it to cause a denial-of-service by crashing the service and disrupting network operations temporarily.

Impact Analysis

If exploited, this vulnerability could lead to network downtime as the impacted service crashes. This may cause temporary loss of connectivity or network functionality for users relying on the affected HPE EdgeConnect SD-WAN Gateways.

Compliance Impact

This vulnerability could lead to network disruption, which may impact systems handling sensitive data. However, the provided CVE details do not specify direct compliance implications for GDPR or HIPAA.

Mitigation Strategies

Apply the latest security patches provided by HPE for the affected EdgeConnect SD-WAN Gateways to address the buffer overflow vulnerability. Isolate impacted systems from untrusted networks until patches are applied. Monitor network traffic for unusual patterns that may indicate exploitation attempts.

Hi! I’m here to help you understand CVE-2026-76699. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70