Proxy Packet Processing Flaw in HPE Components Exposes Security Risk
CVE-2026-76685

8.1HIGH

Key Information:

Vendor

HP (HP)

Status
Edgeconnect Sd-wan Gateways
Vendor
CVE Published:
15 September 2026

What is CVE-2026-76685?

A vulnerability in the proxy packet processing logic of HPE components allows for improper handling of malformed or truncated input. An unauthenticated remote attacker could exploit this flaw by sending specifically crafted input, leading to an integer overflow condition. This exploitation could trigger a buffer overflow, which may facilitate remote code execution or result in denial-of-service conditions, impacting the integrity of network operations.

Affected Version(s)

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.6.0.0 <= 9.6.3.1

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.