CVE-2026-76674
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. An unauthenticated remote attacker can execute arbitrary code, leading to complete system compromise.
Risk Assessment
An unauthenticated attack could lead to complete gateway compromise, enabling network traffic interception and disruption of network operations.
Recommendation
Install security patches provided by the vendor and monitor the network for unusual activity.
Other vulnerabilities in EdgeConnect SD-WAN Gateways
See all- CVE-2026-76675Critical
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. An authenticated remote attacker with high privileges can execute arbitrary commands on the underlying operating system, leading to complete system compromise.
- CVE-2026-76677High
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.
- CVE-2026-76676High
Buffer overflow vulnerability in the underlying operating system of EdgeConnect SD-WAN Gateways. An unauthenticated adjacent attacker could execute arbitrary code if certain preconditions outside the attacker's control are met. Successful exploitation could lead to complete system compromise.
Original NVD description (English source)
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS