Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
CVE-2026-76705

5.5MEDIUM

Key Information:

Vendor

HP (HP)

Status
Edgeconnect Sd-wan Gateways
Vendor
CVE Published:
15 September 2026

What is CVE-2026-76705?

A buffer overflow vulnerability has been identified in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. This flaw allows an authenticated remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system, potentially compromising system integrity and security. The exploitation of this vulnerability could lead to significant risks, necessitating immediate attention from system administrators to apply relevant patches and safeguard their networks.

Affected Version(s)

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.6.0.0 <= 9.6.3.1

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.