Known vulnerabilities in Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-76707 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view… | 4.3 Medium | Sep 15, 2026 |
| CVE-2026-76706 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated… | 5.3 Medium | Sep 15, 2026 |
| CVE-2026-76705 | A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways | 5.5 Medium | Sep 15, 2026 |
| CVE-2026-76703 | A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN… | 5.5 Medium | Sep 15, 2026 |
| CVE-2026-76704 | A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an… | 5.5 Medium | Sep 15, 2026 |
| CVE-2026-76702 | A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local… | 5.8 Medium | Sep 15, 2026 |
| CVE-2026-76701 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated… | 5.9 Medium | Sep 15, 2026 |
| CVE-2026-76700 | Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause… | 5.9 Medium | Sep 15, 2026 |
| CVE-2026-76698 | A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN… | 6.5 Medium | Sep 15, 2026 |
| CVE-2026-76699 | A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking… | 6.4 Medium | Sep 15, 2026 |
| CVE-2026-76697 | A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote… | 6.5 Medium | Sep 15, 2026 |
| CVE-2026-76696 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to… | 6.5 Medium | Sep 15, 2026 |
| CVE-2026-76695 | Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways… | 6.5 Medium | Sep 15, 2026 |
| CVE-2026-76694 | A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways | 6.6 Medium | Sep 15, 2026 |
| CVE-2026-76692 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain… | 7.1 High | Sep 15, 2026 |
| CVE-2026-76693 | A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause… | 7.0 High | Sep 15, 2026 |
| CVE-2026-76691 | Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways | 7.2 High | Sep 15, 2026 |
| CVE-2026-76690 | A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary… | 7.2 High | Sep 15, 2026 |
| CVE-2026-76689 | A vulnerability exists in the configuration processing logic of the affected component where malformed input is… | 7.2 High | Sep 15, 2026 |
| CVE-2026-76688 | Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could… | 7.5 High | Sep 15, 2026 |
| CVE-2026-76686 | A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways | 7.5 High | Sep 15, 2026 |
| CVE-2026-76687 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege… | 7.5 High | Sep 15, 2026 |
| CVE-2026-76685 | A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes… | 8.1 High | Sep 15, 2026 |
| CVE-2026-76683 | Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow… | 8.1 High | Sep 15, 2026 |
| CVE-2026-76684 | Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially… | 8.1 High | Sep 15, 2026 |
Other Hewlett Packard Enterprise (HPE) products
ArubaOS (AOS) 105
Fabric Composer 98
Unknown product 71
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central 51
AOS-CX 46
ClearPass Policy Manager (CPPM) 36
Aruba ClearPass Policy Manager 33
EdgeConnect SD-WAN Orchestrator 27
HPE Aruba Networking Wireless Operating System (AOS) 27
Aruba EdgeConnect Enterprise Software 23
Instant On 20
AOS-8 Instant and AOS-10 AP 18