Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
CVE-2026-76683

8.1HIGH

Key Information:

Vendor

HP (HP)

Status
Edgeconnect Sd-wan Gateways
Vendor
CVE Published:
15 September 2026

What is CVE-2026-76683?

A buffer overflow vulnerability has been identified in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. This vulnerability could enable an unauthenticated remote attacker to execute arbitrary commands on the host system, contingent upon certain preconditions being met. If successfully exploited, this may lead to complete system compromise, allowing the attacker to gain unauthorized access and control over the underlying operating system.

Affected Version(s)

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.6.0.0 <= 9.6.3.1

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.