Buffer Overflow Vulnerability in HPE Configuration Component
CVE-2026-76689

7.2HIGH

Key Information:

Vendor

HP (HP)

Status
Edgeconnect Sd-wan Gateways
Vendor
CVE Published:
15 September 2026

What is CVE-2026-76689?

A vulnerability in the configuration processing logic of the HPE Configuration Component allows for the improper processing of malformed input. An authenticated remote attacker with administrative privileges can exploit this flaw by supplying specially crafted configuration data. This exploitation could lead to a stack-based buffer overflow, which increases the risk of remote code execution with root privileges or may result in a denial of service by crashing the system. Proper input validation and security measures are essential to mitigate this risk.

Affected Version(s)

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.6.0.0 <= 9.6.3.1

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.